CVE-2026-9974

CVE-2026-9974 concerns Google Chrome's GPU component in Chromium. The vulnerability is an out-of-bounds write in the GPU code that, if a renderer process is already compromised, could enable a sandbox escape via a crafted HTML page. Affected version range is Chrome prior to 148.0.7778.216. The do...

CVE-2026-9973

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9973

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9962

Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9961

Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-9958

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2026-9955

Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-9957

Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-9956

Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-9951

CVE-2026-9951 describes a use-after-free in the UI of Google Chrome (Chromium) prior to version 148.0.7778.216. The underlying issue is a UI component use-after-free flaw that could enable a remote attacker to potentially perform a sandbox escape through a crafted HTML page, with the documented i...

CVE-2026-9946

CVE-2026-9946 : A use-after-free in ANGLE within Google Chrome (Chromium) allows a remote attacker with a compromised renderer to potentially escape the sandbox via a crafted HTML page. Affected: ANGLE in Chrome prior to 148.0.7778.216. Impact: sandbox escape risk if exploited. Mitigation: upgrad...

CVE-2026-9948

The CVE-2026-9948 entry concerns a use-after-free in the Views component of Google Chrome on macOS, reported as pre-148.0.7778.216. The underlying issue is a use-after-free in the renderer process’s Views handling that could allow a remote attacker who crafts a page to escape the Chrome sandbox. ...

CVE-2026-9943

CVE-2026-9943 describes an out-of-bounds read in WebGL within the Chromium-based Google Chrome browser for Android, prior to version 148.0.7778.216. The flaw could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is rooted in WebGL handling in Chrome/Ch...

CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9940

The CVE-2026-9940 entry describes a heap buffer overflow in ANGLE within Google Chrome (Chromium) prior to 148.0.7778.216. The underlying issue is a heap corruption vulnerability triggered by a crafted HTML page, allowing a remote attacker to potentially exploit it. Severity is rated High; attack...

CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9938

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9938

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9933

Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-9932

Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...