11219 matches found
CVE-2026-10927
Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10928
Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
CVE-2026-10928
Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
CVE-2026-10927
The vulnerability CVE-2026-10927 affects Google Chrome’s Dawn component in the renderer process, with an out-of-bounds read that could enable a sandbox escape via a crafted HTML page. The issue is tied to Chrome versions prior to 149.0.7827.53. An attacker who already has renderer access could po...
CVE-2026-10925
CVE-2026-10925 : Affected product is Google Chrome on macOS using Skia. The vulnerability is an out-of-bounds write in Skia prior to version 149.0.7827.53, which could let a remote attacker who has already compromised the renderer process perform a sandbox escape via a crafted HTML page. The issu...
CVE-2026-10925
Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10919
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10919
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10919
The CVE-2026-10919 entry is for a Use-after-Free vulnerability in ANGLE that affects Google Chrome prior to version 149.0.7827.53. The issue could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page, as reported...
CVE-2026-10917
Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10913
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10914
The CVE-2026-10914 entry affects ANGLE in Google Chrome on Windows. The issue is a Use-after-Free in ANGLE that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome with ANGLE enabled, prior to version 149.0....
CVE-2026-10913
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10911
Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-10910
Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10904
CVE-2026-10904 : In Google Chrome, an inappropriate implementation in the V8 engine prior to version 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The issue is listed with a Chromium severity of High and is mitigated by upgrading to ...
CVE-2026-10901
CVE-2026-10901 is a use-after-free vulnerability in Passwords for Google Chrome on macOS, exploitable when a user is lured into specific UI gestures and visits a crafted HTML page. Affected: Chrome on macOS prior to 149.0.7827.53. Impact: remote code execution via a crafted page; Chromium indicat...
CVE-2026-10903
This CVE (CVE-2026-10903) concerns a use-after-free in WebRTC within Google Chrome before version 149.0.7827.53, enabling a remote attacker to run arbitrary code in the sandbox via a crafted HTML page. The issue affects WebRTC in Chrome/Chromium; the public description confirms the root cause is ...