CVE-2026-13941

Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13941

Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13938

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13938

An integer overflow flaw exists in the Fonts component of the Chromium browser (including Google Chrome and Microsoft Edge ). This vulnerability allows a remote attacker to perform an out-of-bounds memory write by navigating to a crafted HTML page . The flaw is specifically present in versions pr...

CVE-2026-13939

A vulnerability exists in the WebShare component of the Chromium browser (used in Google Chrome on Android prior to version 150.0.7871.47 ) due to insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can leverage this flaw to perform UI s...

CVE-2026-13936

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13937

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13936

An inappropriate implementation flaw exists in the Passwords component of the Chromium browser, affecting Google Chrome on Android prior to version 150.0.7871.47 . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. This...

CVE-2026-13936

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13935

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13933

The Chromium browser (and Microsoft Edge ) contains an insufficient policy enforcement flaw within the Passwords component. This vulnerability, caused by a lack of access control , allows a remote attacker who has successfully compromised the renderer process to obtain potentially sensitive infor...

CVE-2026-13934

The Dawn component in Google Chrome (WebGPU implementation) contains an improper input validation vulnerability (CWE-20 ). The root cause is a failure to check required Vulkan specification constraints when creating YCbCr samplers . Specifically, the software did not verify that the address mode ...

CVE-2026-13933

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13932

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13934

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13932

An inappropriate implementation flaw in the Sharing component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. This vulnerability is cat...

CVE-2026-13934

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13930

A vulnerability exists in the Actor component of the Chromium browser, including Google Chrome and Microsoft Edge . The flaw stems from insufficient policy enforcement at the client side, which could allow a remote attacker to bypass navigation restrictions by using a crafted HTML page . This vul...

CVE-2026-13931

An inappropriate implementation flaw in the Media component of the Chromium browser (used in Google Chrome on Windows) allows a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. This vulnerability affected versions prior to 150.0.7871.47 . Se...

CVE-2026-13931

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...