85133 matches found
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91714
CVE-2026-91714 is a Medium -severity vulnerability in Google Chrome affecting the Fonts subsystem prior to version 153.0.8010.47 . An observable discrepancy in font rendering allowed a remote attacker, leveraging social engineering, to trick a user into visiting a crafted HTML page and leak sensi...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-79984
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91745
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91711
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91711
CVE-2026-91711 is an out-of-bounds write in the ServiceWorker component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit it by luring a user into visiting a crafted HTML page , leading to arbitrary code execution within the browser's sandbox . The vulne...
CVE-2026-91715
A type confusion flaw in the ServiceWorker component of Google Chrome (Chromium) prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The bug was reported by Cristian Di Nicola on 2026-09-07 (Chromium issu...
CVE-2026-91737
CVE-2026-91737 is a Use after free in the PDF component of Google Chrome prior to 153.0.8010.47 , rated High severity with a CVSS v3.1 score of 8.8 (network vector, user interaction required). A remote attacker can execute arbitrary code inside the sandbox by convincing a user to open a crafted H...
EUVD-2026-79980
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91729
CVE-2026-91729 is a use-after-free vulnerability in DigitalCredentials in Google Chrome prior to 153.0.8010.47 , reported by researcher sean geofrey on 2026-09-04 (bug 557206809 ). A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted HTML pa...
CVE-2026-91729
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91715
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91711
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91745
A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to version 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the browser's security sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rated this High severit...
EUVD-2026-79981
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-79982
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...