CVE-2026-13839

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-13838

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-13828

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-14146

An inappropriate implementation flaw in the CSS component of the Chromium browser (including Google Chrome and Microsoft Edge) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability affects Google Chrome versions prior to 150.0.7871.47 . While the Chromium ...

CVE-2026-14112

An inappropriate implementation flaw in the Enterprise component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to obtain potentially sensitive information from process memory. This vulnerability is triggered when a user is convinced to perform spec...

CVE-2026-14098

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14061

The Dawn component in Google Chrome and Microsoft Edge is vulnerable to an inappropriate implementation flaw (CWE-284). A remote attacker can exploit this lack of access control by using a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability affects...

CVE-2026-14014

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14004

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14004

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14001

An inappropriate implementation flaw in the Network component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to inject arbitrary scripts or HTML (UXSS ) via a crafted HTML page. This vulnerability is present in versions of Chrome prior to 150.0.7871...

CVE-2026-13988

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13932

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13932

An inappropriate implementation flaw in the Sharing component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. This vulnerability is cat...

CVE-2026-13931

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13931

An inappropriate implementation flaw in the Media component of the Chromium browser (used in Google Chrome on Windows) allows a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. This vulnerability affected versions prior to 150.0.7871.47 . Se...

CVE-2026-13892

An inappropriate implementation flaw in the Chrome for iOS component of the Chromium browser allows a remote attacker to leak cross-origin data via a crafted HTML page. The attack requires the user to perform specific UI gestures . This issue affects Google Chrome on iOS versions prior to 150.0.7...

CVE-2026-13887

CVE-2026-13887 involves an insufficient policy enforcement flaw within the NFC component of the Chromium browser. This vulnerability could allow a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue affects Google Chrome on Android...

CVE-2026-13876

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass content security policy via malicious network traffic. Chromium security severity: Medium...

CVE-2026-13868

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...