CVE-2026-113146

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment due to a memory corruption vulnerability in the Performance Application Programming Interfaces APIs. Exploitation is achieved by convincing a user to visit a...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper input validation in Performance APIs; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Google Chrome resource management error vulnerability

Google Chrome on Android versions prior to 156.0.8078.47 contains a resource management error vulnerability. This vulnerability stems from post-free reuse in Performance APIs and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of performance APIs in Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A observable discrepancy in Performance APIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

CLEANSTART-2024-HO89117 Use after free in Performance APIs in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Performance APIs in Google Chrome prior to 101...

CVE-2026-13952

An inappropriate implementation flaw was found in the PerformanceAPIs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513401808...

SUSE CVE-2026-13952

Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-40640

Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13952

An inappropriate implementation flaw in the PerformanceAPIs component of the Chromium browser (and notably affecting Microsoft Edge ) allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impacts versions of Google Chrome prior to 150.0.7871.47 . Exploitati...

CVE-2026-13952

Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13952

Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11284

A side-channel information leakage flaw was found in the PerformanceAPIs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502073069...

SUSE CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Chromium: CVE-2026-11284 Side-channel information leakage in PerformanceAPIs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-34745

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...