ROS-20260717-73-0029

The vulnerability of Google Chrome’s UMA User Metrics Analysis component is related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260716-73-0026

The vulnerability of the Audio component in Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...

CVE-2026-15718 Invalid pointer in the JavaScript: WebAssembly component

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-58596 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Chromium: CVE-2026-13918 Use after free in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome buffer overflow vulnerability (CNVD-2026-27209)

Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a buffer error vulnerability. The vulnerability arises due to a memory access flaw in the ANGLE component, which leads to out-of-bounds memory reads and writes during processing graphic...

SUSE CVE-2026-14120

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-58293

CVE-2026-58293 affects Microsoft Edge (Chromium-based). It describes external control of a file name or path that allows an unauthenticated attacker to execute code over the network. The CVSSv3.1 base score is 8.1 (High) with attack vector Network, attack complexity High, privileges required None...

CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Chromium: CVE-2026-13782 Use after free in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14095 Insufficient validation of untrusted input in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Dawn Sandbox Bypass

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...

EUVD-2026-40523

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

Google Chrome < 150.0.7871.46 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.46. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop0175352312 advisory. - Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed...

CVE-2026-13973

Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13775

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-14077

Inappropriate implementation in Select in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14023

A vulnerability exists in the SanitizerAPI component of the Chromium browser (including Google Chrome and Microsoft Edge ) due to insufficient validation of untrusted input. A remote attacker can exploit this flaw by using a crafted HTML page to bypass the same-origin policy and manipulate data i...

CVE-2026-14020

Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13977

Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...