4655 matches found
CVE-2026-7983
Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7983
Google Chrome and Microsoft Edge are vulnerable to an out-of-bounds read in the Dawn component. This flaw allows a remote attacker to leak cross-origin data by using a specially crafted HTML page. The issue affects versions prior to 148.0.7778.96 . Remediation is available via updates; for exampl...
CVE-2026-7979
Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7979
A vulnerability in the Media component of Google Chrome (prior to version 148.0.7778.96 ) allows a remote attacker to leak cross-origin data through a crafted HTML page. This issue is attributed to an inappropriate implementation and a lack of mechanisms for verifying data sources. Affected produ...
CVE-2026-7979
Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7972
Google Chrome versions prior to 148.0.7778.96 are vulnerable to an uninitialized use in the GPU component. This flaw allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The vulnerability also impacts Microsoft Edge and the Chromium ...
CVE-2026-7972
Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7965
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7965
A vulnerability exists in the DevTools suite of Google Chrome (and reportedly Microsoft Edge ) due to insufficient validation of untrusted input . An attacker who has already compromised the renderer process can exploit this flaw to leak cross-origin data via a specially crafted HTML page. This i...
CVE-2026-7961
Insufficient validation of untrusted input in Permissions in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...
CVE-2026-7961
The Permissions component in Google Chrome (and Microsoft Edge ) is vulnerable to information disclosure due to insufficient validation of untrusted input . This flaw allows an attacker on the local network segment to leak cross-origin data via malicious network traffic. The issue affects version...
CVE-2026-7954
Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7954
Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7954
Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7954
A race condition in the Shared Storage API interface of Google Chrome (and potentially Microsoft Edge) prior to version 148.0.7778.96 allows a remote attacker to leak cross-origin data . Exploitation requires the attacker to have already compromised the renderer process and provide a crafted HTML...
CVE-2026-7949
Google Chrome and Microsoft Edge are affected by an out-of-bounds read vulnerability in the Skia graphics library, which exists in versions prior to 148.0.7778.96 . The underlying cause is triggered by excessive drawing operations that allow for reading data beyond memory buffer boundaries. An at...
CVE-2026-7949
Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-7949
Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...