CVE-2026-121047

A buffer overflow vulnerability in the Media component of Google Chrome (versions prior to 157.0.8103.38 ) allows a remote attacker to execute arbitrary code inside the sandbox. The vulnerability can be triggered by inducing a user to open a specially crafted HTML page . To remediate this issue, ...

CVE-2026-121185

A use after free vulnerability exists in the PictureInPicture component of Google Chrome prior to version 157.0.8103.38 . A remote attacker could leverage social engineering to execute arbitrary code outside the sandbox by navigating to a crafted HTML page. This issue is classified with a High se...

CVE-2026-121140

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116513

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116512

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121233

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a type confusion flaw in CacheStorage . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by processing a crafted HTML page . The severity is rated as High by Chromium security standards. While ...

CVE-2026-121140

Google Chrome contains an out-of-bounds read vulnerability in its Internals component (prior to version 157.0.8103.38). A remote attacker who has successfully compromised the renderer process could exploit this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandbox...

CVE-2026-121233

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121140

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121112

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116510

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116507

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116509

Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121074

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121074

Google Chrome on Android versions prior to 157.0.8103.38 is vulnerable to a memory corruption in the GPU component. This vulnerability allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . While this vulnerability is documented a...

CVE-2026-121074

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121112

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121098

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a High severity issue (CWE-754) involving improper state validation in the GPU . A remote attacker who has successfully compromised the renderer process can leverage this flaw to execute arbitrary code outside the sandbox by serving ...

CVE-2026-121098

Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121112

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an out-of-bounds read in the Permissions component. This flaw allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. T...