CVE-2026-11059

Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11054

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11055

CVE-2026-11055 affects ANGLE in Google Chrome on Windows. The issue is a use-after-free in ANGLE that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected versions are Chrome on Windows prior to 149.0.7827.53. Remedy: upgrade to Chrome ...

CVE-2026-11054

CVE-2026-11054 describes a use-after-free in WebRTC in Google Chrome prior to 149.0.7827.53. A remote attacker could execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software is Google Chrome (WebRTC component) with versions before 149.0.7827.53. The vulnerabili...

CVE-2026-11054

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11055

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11050

Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11050

The CVE-2026-11050 entry concerns a Use-After-Free in V8 (Chrome) before version 149.0.7827.53 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product is Google Chrome (V8 engine); the underlying cause is a use-after-free in V8 par...

CVE-2026-11050

Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

CVE-2026-11049 describes a use-after-free in Chrome’s Password Manager that could allow a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Affected software: Google Chrome (Password Manager component). Root cause: use-after-free defect in the Password Manager ...

CVE-2026-11046

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11046

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11028

CVE-2026-11028 is a use-after-free in Media on Linux/ChromeOS of Google Chrome prior to 149.0.7827.53. A remote attacker who has compromised the renderer process could execute arbitrary code inside the Chrome sandbox via a crafted HTML page. This indicates an in-sandbox attacker exploit affecting...

CVE-2026-11028

Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11028

Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11003

CVE-2026-11003 describes a use-after-free in WebRTC of Google Chrome prior to 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software is Google Chrome (WebRTC component); the root cause is use-after-free in WebRTC h...

CVE-2026-11003

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11003

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...