CVE-2026-11055

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11055

CVE-2026-11055 concerns Google Chrome on Windows, where a use-after-free in ANGLE can be triggered by a crafted HTML page. The vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. Affected versions are Chrome prior to 149.0.7827.53 . There is no explicit ex...

CVE-2026-11052

Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allows a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. Affected: Chrome on Windows; component: GPU/renderer pathway; root cause: type confusion in GPU handling. Impact is sandbox es...

CVE-2026-11047

Google Chrome on Windows is affected by CVE-2026-11047 due to an inappropriate implementation in the Base component that could allow a sandbox escape if a renderer process is compromised. The issue affects Chrome versions prior to 149.0.7827.53. Impact is that a remote attacker could escape the s...

CVE-2026-11041

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11009

Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11005

Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10999

Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10968

Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-10968

CVE-2026-10968 affects Google Chrome on Windows, specifically Dawn, with insufficient validation of untrusted input. The underlying issue allows a remote attacker who has compromised theRenderer process to leak cross-origin data through a crafted HTML page. Affected version range is before Chrome...

CVE-2026-10968

Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-10955

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2026-10955

Summary (CVE-2026-10955): Type Confusion in ANGLE affecting Google Chrome on Windows, prior to version 149.0.7827.53. The vulnerability could allow a remote attacker to perform out-of-bounds memory access via a crafted HTML page. The issue is documented across multiple sources (NVD, EUVD, CIRCL, ...

CVE-2026-10955

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2026-10942

Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: High...

CVE-2026-10942

Summary: CVE-2026-10942 affects Google Chrome on Windows prior to version 149.0.7827.53 due to an incorrect UI implementation, enabling a local attacker to escalate privileges via a malicious file. The vulnerability is described as high severity. What is affected: Google Chrome (Windows) before 1...

CVE-2026-10913

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10914

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-46808

Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...

PT-2026-46550

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the GPU component on Windows allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via ...