CVE-2026-13794

Google Chrome on Windows versions prior to 150.0.7871.47 is vulnerable to arbitrary code execution due to insufficient validation of untrusted input in WebAppInstalls . A remote attacker can exploit this by convincing a user to perform specific UI gestures while visiting a crafted HTML page. The ...

CVE-2026-13793

Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13795

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-13794

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-13794

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-13795

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-13793

Google Chrome and Microsoft Edge are vulnerable to a high-severity flaw due to insufficient policy enforcement in SVG and a lack of mechanisms for verifying the source of the data . A remote attacker can exploit this by using a crafted HTML page to leak cross-origin data or access confidential in...

CVE-2026-13793

Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13794

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-13792

Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13792

Google Chrome on Mac is vulnerable to a Use after free flaw in the Touchbar component (versions prior to 150.0.7871.47 ). A remote attacker can exploit this via a crafted HTML page to potentially perform a sandbox escape . This issue has been addressed in updated versions, such as 150.0.7871.46-1...

CVE-2026-13790

A side-channel information leakage vulnerability exists in the Scroll component of Google Chrome (prior to version 150.0.7871.47) and Microsoft Edge . The root cause is improper protection against attacks via external physical channels , which could allow a remote attacker to leak cross-origin da...

CVE-2026-13789

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13790

Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13788

Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-13790

Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13790

Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-13788

Google Chrome on Android is vulnerable to a use after free issue in Fullscreen prior to version 150.0.7871.47 . This vulnerability allows a remote attacker to execute arbitrary code via a crafted HTML page. The Chromium security severity for this issue is Critical . Remediation is available in ve...

CVE-2026-13786

Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-13786

A use after free vulnerability exists in the Ozone component of Google Chrome and Microsoft Edge web browsers. This flaw allows a remote attacker to execute arbitrary code or cause a service failure by interacting with a crafted HTML page. The vulnerability affects versions of Google Chrome prior...