CVE-2026-10947

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10948

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10948

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10947

Affected software: Google Chrome. The CVE-2026-10947 describes a use-after-free in WebRTC that affects Chrome versions prior to 149.0.7827.53. Root cause: use-after-free in WebRTC code path exploited via a crafted HTML page. Impact: remote attacker could execute arbitrary code inside Chrome’s san...

CVE-2026-10947

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10945

Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-10946

CVE-2026-10946 describes a heap buffer overflow in Chrome’s Media component before version 149.0.7827.53. A remote attacker could entice a user to perform specific UI gestures on a crafted HTML page to execute arbitrary code within Chrome’s sandbox. The NVD/CVE records confirm the issue and its i...

CVE-2026-10946

Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10946

Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10945

CVE-2026-10945 describes a use-after-free in Chrome’s PDF handling prior to 149.0.7827.53. A remote attacker could convince a user to perform specific UI gestures, leading to arbitrary code execution inside a sandbox via a crafted PDF file. Affected software is Google Chrome (Chromium-based); exa...

CVE-2026-10943

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10943

CVE-2026-10943 describes a use-after-free in WebRTC within Google Chrome prior to version 149.0.7827.53, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (WebRTC component). Root cause: use-after-free in WebRTC. Impac...

CVE-2026-10941

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10941

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10941

Out of bounds memory access in Skia within Google Chrome (prior to 149.0.7827.53) could allow a remote attacker to execute arbitrary code in the sandbox via a crafted HTML page. Affected product: Google Chrome; component: Skia. Severity: High. Root cause: memory access error in Skia that arises b...

CVE-2026-10939

CVE-2026-10939 describes a use-after-free in WebRTC within Google Chrome before version 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product is Google Chrome; underlying issue is a WebRTC use-after-free (details n...

CVE-2026-10939

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10936

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10936

CVE-2026-10936 : Type Confusion in V8 within Google Chrome (pre-149.0.7827.53) allows remote attackers to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product/component: Google Chrome, using the V8 JavaScript engine. Root cause: type confusion in V8 as stated in the...

CVE-2026-10935

CVE-2026-10935: Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This affects Google Chrome's V8 engine before the specified version. Practical impact is high, as code execution occurs in th...