CVE-2026-19176

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19167

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19167

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19163

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19161

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19160

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19161

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19160

CVE-2026-19160 concerns an uninitialized use in Skia within Google Chrome before version 151.0.7922.109 . The issue allowed a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. Connected documents confirm the vulnerability is tied t...

CVE-2026-19161

CVE-2026-19161 affects Google Chrome’s Skia component prior to version 151.0.7922.109. Uninitialized use in Skia could allow a remote attacker who has already compromised the Chrome renderer process to leak cross-origin data via a crafted HTML page. The issue is fixed in the Chrome Stable channel...

CVE-2026-19155

CVE-2026-19155 affects Google Chrome (Payments component) and is due to a use-after-free in Payments prior to Chrome 151.0.7922.109. An attacker who can compromise the renderer could potentially escape the sandbox via a crafted HTML page. The Chrome security update (151.0.7922.108/109 for Windows...

CVE-2026-19153

CVE-2026-19153 corresponds to a Chrome vulnerability where insufficient validation of untrusted input in Workers could be leveraged by a renderer process that has been compromised to bypass site isolation via a crafted HTML page. The issue affects Google Chrome prior to version 151.0.7922.109, wi...

CVE-2026-19152

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19152

Google Chrome vulnerability CVE-2026-19152 affects Chrome releases prior to 151.0.7922.109, where insufficient policy enforcement in the Navigation component could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. The issue is tied to the Navigati...

CVE-2026-19148

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19148

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-19147

CVE-2026-19147 affects Google Chrome on Linux. The issue is a use-after-free in the Aura component, allowing a remote attacker that has compromised the renderer to potentially escape the sandbox via a crafted HTML page. The vulnerability is tied to Chrome/Chromium’s Aura handling and is fixed in ...

CVE-2026-19147

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...