CVE-2026-102309

A use after free vulnerability exists in the FullScreen component of Google Chrome prior to version 154.0.8037.92 . A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution outside the sandbox. While specific exploit details are not provided, the vu...

CVE-2026-102304

A use-after-free vulnerability in the Passwords component of Google Chrome (versions prior to 154.0.8037.92) allows a remote attacker to execute arbitrary code outside the sandbox . This can be triggered by a victim viewing a crafted HTML page . No specific exploit details or proof-of-concept lin...

CVE-2026-102316

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102316

Google Chrome is vulnerable to a use-after-free issue in the Views framework, affecting versions prior to 154.0.8037.92 . A remote attacker can exploit this vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page , potentially allowing for arbitrary code e...

CVE-2026-102311

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102307

Google Chrome on Android versions prior to 154.0.8037.92 is vulnerable to an uninitialized resource flaw in the Dawn component. A remote attacker can exploit this by providing a crafted HTML page to read memory outside the sandbox. No specific exploitation details or remediation steps are provide...

CVE-2026-102306

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102313

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102306

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102313

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102313

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102306

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89378

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102306

A use-after-free vulnerability exists in the Bluetooth component of Google Chrome prior to version 154.0.8037.92 . A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page , triggering the application to access deallocated memory. This could potentially allow...

CVE-2026-102313

Google Chrome on Windows versions prior to 154.0.8037.92 is vulnerable to an uninitialized resource flaw in the ANGLE (Almost Native Graphics Layer Engine) component. A remote attacker can exploit this vulnerability by tricking a user into opening a crafted HTML page , which could allow the attac...

CVE-2026-102331

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-102317

Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-102317

Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-102317

Google Chrome on Windows versions prior to 154.0.8037.92 is affected by an improper privilege management vulnerability within the Mojo inter-process communication (IPC) framework. A local attacker can exploit this flaw by running a crafted local program to bypass the browser's sandbox security bo...

CVE-2026-102331

A buffer overflow vulnerability in the ANGLE component of Google Chrome on Android (prior to version 154.0.8037.92 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox . The attack can be initiated through a crafted HTML page . Exploitation details are not provided...