Chromium: CVE-2026-84325 Improper input validation in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260908-73-0080

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface through a created HTML page...

ROS-20260908-73-0107

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260908-73-0104

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260908-73-0099

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0098

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260908-73-0087

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the sandbox through the created HTML page...

ROS-20260908-73-0085

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0084

The vulnerability of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the browser’s sandbox through the created HTML page...

ROS-20260908-73-0083

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0073

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

ROS-20260908-73-0072

The vulnerability of the PerformanceManager component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0102

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0077

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

ROS-20260908-73-0105

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260908-73-0086

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...

ROS-20260907-73-0064

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Microsoft Edge browser (based on Chromium) relates to errors in data type mixing, allowing a malicious actor to execute arbitrary code.

The vulnerability of Microsoft Edge based on Chromium is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Edge (Chromium) < 152.0.4191.62 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.62. It is, therefore, affected by multiple vulnerabilities as referenced in the September 8, 2026 advisory. - Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute...

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially created HTML page...