CVE-2026-7966

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7967

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7968

Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7963

An inappropriate implementation in the ServiceWorker component of Google Chrome (and potentially Microsoft Edge ) prior to version 148.0.7778.96 allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a crafted HTML page. This vulnerability, ide...

CVE-2026-7965

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7963

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7964

Google Chrome versions prior to 148.0.7778.96 are vulnerable to a security flaw in the FileSystem component due to insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can exploit this to perform arbitrary read/write operations via a craf...

CVE-2026-7964

Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7963

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7964

Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7965

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7960

A race condition vulnerability exists in the Speech component of the Google Chrome and Microsoft Edge browsers (versions prior to 148.0.7778.96 ). This synchronization error, caused by improper handling of a common resource, allows a remote attacker who has already compromised the renderer proces...

CVE-2026-7960

Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7960

Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7959

Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7957

Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7959

Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7955

Google Chrome and Microsoft Edge web browsers are vulnerable to an information disclosure flaw caused by the uninitialized use of variables in the GPU component. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to obtain potentially ...

CVE-2026-7956

A use after free vulnerability in the Navigation component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.96 allows a remote attacker who has already compromised the renderer process to perform a sandbox escape via a crafted HTML page. The flaw is rooted in the reuse of resour...

CVE-2026-7954

A race condition vulnerability exists in the Shared Storage API interface of Google Chrome (and Microsoft Edge ) versions prior to 148.0.7778.96 . The root cause is a synchronization error when using a shared resource, which could allow a remote attacker who has compromised the renderer process t...