CVE-2026-14117

An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513751020...

CVE-2026-14135

An insufficient validation of untrusted input flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514058566...

CVE-2026-14116

An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513747800...

CVE-2026-14140

An insufficient validation of untrusted input flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514072607...

CVE-2026-14131

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514020982...

CVE-2026-14382

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=250000 https://code.google.com/p/chromium/issues/detail?id=492218546...

CVE-2026-14414

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513948227...

CVE-2026-15115

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520576676...

CVE-2026-14412

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513920834...

CVE-2026-14429

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520571816...

CVE-2026-14401

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513048822...

CVE-2026-14411

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513919827...

CVE-2026-15769

An insufficient validation of untrusted input flaw was found in the Linux Toolkit Theming component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519731111...

CVE-2026-15778

An insufficient validation of untrusted input flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513795122...

CVE-2026-15771

An insufficient validation of untrusted input flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=525177160...

CVE-2026-15122

An insufficient validation of untrusted input flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523717219...

CVE-2026-59888

A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an...

CVE-2026-16414

A flaw was found in Chromecast within Google Chrome. This vulnerability, caused by insufficient validation of untrusted input, allows a local attacker to exploit the system. By sending malicious network traffic, the attacker can potentially perform a sandbox escape, gaining unauthorized access...

CVE-2026-16422

A flaw was found in Google Chrome. Insufficient validation of untrusted input in the Certificate component allows an attacker in a privileged network position to perform domain spoofing. This can be achieved by sending malicious network traffic, leading to a user being misled about the authentici...

CVE-2026-16415

A flaw was found in Google Chrome Extensions. This vulnerability, caused by insufficient validation of untrusted input, allows a remote attacker to spoof the contents of the Omnibox URL bar. By crafting a malicious HTML page, an attacker could mislead users about the authenticity of a website...