24515 matches found
CVE-2026-102305
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-102310
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-102302
A buffer overflow vulnerability exists in the V8 engine of Google Chrome versions prior to 154.0.8037.92 . A remote attacker can exploit this flaw by serving a crafted HTML page to execute arbitrary code within the browser sandbox. Exploitation details are not provided in the documents.
CVE-2026-102319
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102325
Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-102328
A type confusion vulnerability exists in the V8 engine within Google Chrome versions prior to 154.0.8037.92 . A remote attacker can exploit this flaw by hosting a crafted HTML page to achieve arbitrary code execution inside the browser sandbox. No specific exploit links or remediation steps are p...
CVE-2026-102326
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-89379
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-89380
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102307
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102323
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102326
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102323
A type confusion flaw in the V8 component of the Google Chrome browser allows a remote attacker to execute arbitrary code inside the sandbox. This vulnerability can be triggered via a crafted HTML page . The issue affects versions prior to 154.0.8037.92 . Remediation is available in the stable ch...
CVE-2026-102313
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102313
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102312
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...
CVE-2026-102313
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-102313
Google Chrome on Windows versions prior to 154.0.8037.92 is vulnerable to an uninitialized resource flaw in the ANGLE (Almost Native Graphics Layer Engine) component. A remote attacker can exploit this vulnerability by tricking a user into opening a crafted HTML page , which could allow the attac...
