EUVD-2026-79979

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91718

CVE-2026-91718 is a use-after-free vulnerability in Google Chrome's Core component, affecting versions prior to 153.0.8010.47 . A remote attacker can execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. The Chromium project assigned this a High security s...

CVE-2026-91710

CVE-2026-91710 is a use after free vulnerability in the WebAppInstalls component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page to a victim. The Chromium security team rates the severit...

EUVD-2026-79978

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79977

Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91716

A use-after-free vulnerability in the Auth component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security team rated the severity as High . The issue was fixed in the stable channel...

EUVD-2026-79976

Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

CVE-2026-91746 is an integer overflow in the Compositing component of Google Chrome, affecting versions prior to 153.0.8010.47 . A remote attacker can exploit this via a crafted HTML page to obtain cross-origin data , bypassing same-origin isolation. Google rated it High severity internally; the ...

EUVD-2026-79974

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91717

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79975

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79972

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

CVE-2026-91740 is an uninitialized resource flaw in Skia , the 2D graphics library used in Google Chrome . A remote attacker could exploit it via a crafted HTML page to obtain cross-origin data , leaking information from other web origins. The vulnerability affects Chrome versions prior to 153.0....

EUVD-2026-79973

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79971

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

CVE-2026-91735

Google Chrome prior to 153.0.8010.47 contains an incorrect authorization flaw in its WebUI component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. The vulnerability was assigned a CVSS...