CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-121047

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116517

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116519

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121071

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121047

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121071

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a High severity security issue where incorrect authorization in the FileSystem API allows a remote attacker to potentially execute arbitrary code outside the sandbox. The attack requires social engineering to lure a user into visitin...

CVE-2026-121185

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121185

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121047

A buffer overflow vulnerability in the Media component of Google Chrome (versions prior to 157.0.8103.38 ) allows a remote attacker to execute arbitrary code inside the sandbox. The vulnerability can be triggered by inducing a user to open a specially crafted HTML page . To remediate this issue, ...

CVE-2026-121185

A use after free vulnerability exists in the PictureInPicture component of Google Chrome prior to version 157.0.8103.38 . A remote attacker could leverage social engineering to execute arbitrary code outside the sandbox by navigating to a crafted HTML page. This issue is classified with a High se...

CVE-2026-121140

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116513

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116512

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121233

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a type confusion flaw in CacheStorage . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by processing a crafted HTML page . The severity is rated as High by Chromium security standards. While ...

CVE-2026-121140

Google Chrome contains an out-of-bounds read vulnerability in its Internals component (prior to version 157.0.8103.38). A remote attacker who has successfully compromised the renderer process could exploit this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandbox...

CVE-2026-121233

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121140

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121112

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116510

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...