CVE-2026-10007

Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10000

Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9994

A use after free vulnerability in the Core components of Google Chrome on Windows (prior to version 148.0.7778.216 ) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a crafted HTML page. This vulnerability also affects Microsoft Edge as i...

CVE-2026-9992

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9983

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9979

The Input component in Google Chrome (prior to version 148.0.7778.216 ) is vulnerable to a security flaw caused by insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can exploit this to bypass site isolation using a crafted HTML page. T...

CVE-2026-9979

Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-9974

Google Chrome and Microsoft Edge are affected by an out-of-bounds write vulnerability in the GPU components . This flaw allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a specially crafted HTML page. The vulnerability may also lead to a s...

CVE-2026-9966

Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9967

Google Chrome and Microsoft Edge are vulnerable to a buffer overflow (out-of-bounds write) within the GPU components . A remote attacker can exploit this vulnerability by providing a crafted HTML page to potentially perform a sandbox escape . The issue affects Google Chrome versions prior to 148....

CVE-2026-9952

A use after free vulnerability exists in the WebAudio component of Google Chrome and Microsoft Edge web browsers (prior to version 148.0.7778.216). The flaw stems from a resource management error where objects are reused after being released. A remote attacker could exploit this via a crafted HTM...

CVE-2026-9946

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9942

Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-9922

A use after free vulnerability in the GPU components of Google Chrome (and Microsoft Edge ) allows a remote attacker to execute arbitrary code via a crafted HTML page. This issue is triggered by the reuse of GPU components after they have been released and can occur even when the renderer process...

CVE-2026-9911

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

CVE-2026-9906

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9897

A use after free vulnerability exists in the DOM components of Google Chrome and Microsoft Edge (prior to version 148.0.7778.216). This resource management flaw occurs when memory is reused after being freed, potentially allowing a remote attacker to execute arbitrary code within a sandbox via a ...

CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9889

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-54125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in Forms, which allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to visit a specially crafted HTML page. Use after...