CVE-2026-91709

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91747

A use-after-free vulnerability in Skia , the 2D graphics library used by Google Chrome , affects versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.48 (Windows/Mac). The flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by serving...

CVE-2026-91733

CVE-2026-91733 is an improper state validation flaw in Skia , the 2D graphics library used in Google Chrome prior to 153.0.8010.47 . An attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the sandbox , resulting in information disclosu...

CVE-2026-91709

CVE-2026-91709 is a type confusion vulnerability in the ServiceWorker component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Jihyeon Jeong (Compsec Lab, Se...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91731

CVE-2026-91731 is a type confusion vulnerability in the Compositing component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page, leading to arbitrary code execution inside the browser's sandbox . The CVS...

EUVD-2026-79966

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79965

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91720

CVE-2026-91720 is an uninitialized resource flaw in the ANGLE component of Google Chrome , present in versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.47 (Linux). A remote attacker can leverage a crafted HTML page to read memory outside the sandbox , rated High by Chromium. The CVSS v...

EUVD-2026-79964

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

CVE-2026-91748 is a race condition in the Extensions component of Google Chrome on Mac prior to 153.0.8010.47 . A remote attacker who had already compromised the renderer process could leverage social engineering to execute arbitrary code outside the sandbox via UI Interaction, rated CVSS 3.1: 8....

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79961

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79962

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91743

A race condition in the Core component of Google Chrome prior to 153.0.8010.47 allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the browser's sandbox by tricking a user into visiting a crafted HTML page. The bug was internally reported by...

CVE-2026-91744

CVE-2026-91744 is a race condition in the PlatformIntegration component of Google Chrome on Mac , affecting versions prior to 153.0.8010.47 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information by delivering a crafte...