CVE-2026-102316

A flaw was found in chromium-browser. A use-after-free issue in the Views framework allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Exploitation of this vulnerability occurs when the application...

CVE-2026-102313

A flaw was found in chromium-browser. An uninitialized resource in the ANGLE Almost Native Graphics Layer Engine component leads to information disclosure. A remote attacker can exploit this vulnerability by convincing a user to open a crafted HTML page, enabling the attacker to read memory outsi...

CVE-2026-102306

A flaw was found in chromium-browser's Bluetooth component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This triggers a use-after-free condition—where the application accesses memory that has already been deallocated—potentially...

CVE-2026-95319

A flaw was found in chromium-browser. A use-after-free memory corruption flaw in the printing component allows a remote attacker who has already compromised the renderer process to escape the browser sandbox and potentially execute arbitrary code on the host system. To exploit this vulnerability,...

CVE-2026-95298

A flaw was found in chromium-browser. A use-after-free vulnerability, where memory is improperly accessed after being released, exists within the browser process. A local attacker can exploit this flaw through specific user interface UI interactions to potentially execute arbitrary code outside t...

CVE-2026-95286

A flaw was found in chromium-browser. A type confusion vulnerability—where data is processed using an incompatible data type—exists in the browser's Bindings component. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page, leading to arbitrary code...

CVE-2026-95278

A flaw was found in chromium-browser. Due to missing authorization in the WakeLock component, a remote attacker who has already compromised the browser's renderer process can bypass system access restrictions. An attacker could exploit this vulnerability by convincing a user to open a specially...

CVE-2026-95308

A flaw was found in chromium-browser. An integer overflow in the Metrics component allows a remote attacker who has already compromised the renderer process to read memory outside the security sandbox. By convincing a user to visit a crafted HTML page, the attacker can exploit this issue to acces...

CVE-2026-95371

A flaw was found in chromium-browser. A missing authorization check in the Views component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements. By tricking a user into visiting a crafted web page, the attacker can display deceptive interface...

CVE-2026-95366

A flaw was found in chromium-browser. A remote attacker with control over a compromised renderer process could exploit a use-after-free condition in the Core component by loading a crafted HTML page. Successful exploitation allows the attacker to bypass the web origin policy, weakening the securi...

CVE-2026-95364

A flaw was found in chromium-browser. Due to improper input validation in the password management component, a remote attacker can spoof user interface UI elements by enticing a user to visit a crafted HTML page. Successful exploitation can allow an attacker to display deceptive interface prompts...

CVE-2026-95344

A flaw was found in chromium-browser. A race condition within the DevTools component allows a remote attacker to bypass site isolation security boundaries through social engineering. By tricking a user into installing a crafted browser extension, the attacker can exploit this timing flaw to acces...

CVE-2026-95285

A flaw was found in chromium-browser. Due to missing authorization checks in the WebView component, a remote attacker who has already compromised a renderer process can bypass the browser's web origin policy by convincing a user to load a crafted HTML page. Successful exploitation could allow the...

CVE-2026-95275

A flaw was found in chromium-browser. An incorrect reference resolution flaw in the MediaStream component allows a remote attacker to bypass the web origin policy a security mechanism that isolates websites from one another by tricking a user into opening a crafted HTML page. Successful...

CVE-2026-95365

A flaw was found in chromium-browser. A type confusion vulnerability in the IndexedDB component allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to open a specially crafted HTML page...

CVE-2026-95356

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the WindowDialog component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to open a specially crafted HTML page, an attacker can exploit this flaw to compromise the...

CVE-2026-95343

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free memory vulnerability—where previously released memory is improperly accessed—in the WebAudio component by convincing a user to view a specially crafted HTML page. Successful exploitation could allow the attacke...

CVE-2026-95335

A flaw was found in chromium-browser. A use-after-free vulnerability in the Human Interface Device HID component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to visit a specially crafted web page, an attacker who has already compromised the...

CVE-2026-95325

A flaw was found in the ANGLE component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, which occurs when memory is referenc...

CVE-2026-95322

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the graphics processing unit GPU component allows a remote attacker to execute arbitrary code outside the browser sandbox. By enticing a user to view a specially crafted HTML page, an attacker who has already compromise...