22745 matches found
EUVD-2026-74343
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87576
An uninitialized resource in the GPU component of Google Chrome on Android prior to version 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to read memory outside the sandbox via a crafted HTML page. The vulnerability was rated Medium severity by the Chrom...
CVE-2026-87613
CVE-2026-87613 is an incorrect reference resolution vulnerability in the Extensions component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this flaw via crafted network traffic to potentially execute arbitrary code outside the browser sandbox . The Chromium te...
CVE-2026-87582
A confused deputy flaw in the DataTransfer component of Google Chrome prior to version 153.0.8010.36 could allow a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the security severity as...
EUVD-2026-74327
Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87537
Missing authorization in the Extensions component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. The Chromium security severity is rated Mediu...
EUVD-2026-74322
Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87481
CVE-2026-87481 is an incorrect authorization vulnerability in WebView within Google Chrome on Android prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page....
EUVD-2026-74320
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
EUVD-2026-74317
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87457
CVE-2026-87457 is a race condition in the Updater component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A local attacker can leverage this flaw to execute arbitrary code outside the sandbox via a local program. Chromium rates the severity as Medium . The fix is to up...
CVE-2026-87506
CVE-2026-87506 is a privilege elevation flaw in the WebUI component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could, via a crafted HTML page, execute arbitrary code outside the sandbox . Chromium rates the security severity as Med...
CVE-2026-87553
Google Chrome prior to 153.0.8010.36 contains an improper input validation flaw in the SiteIsolation mechanism. A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security ...
CVE-2026-87547
CVE-2026-87547 is an incorrect reference resolution flaw in the FileSystem component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerabili...
EUVD-2026-74315
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74311
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74534
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87504
A use after free vulnerability in Core of Google Chrome prior to 153.0.8010.36 allows a remote attacker, leveraging social engineering via a crafted Chrome extension, to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Medium . Users should update to version 153....
EUVD-2026-74528
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87480
CVE-2026-87480 is a use-after-free vulnerability in the Printing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox . The Chromium...