CVE-2026-13858

CVE-2026-13858 involves an out-of-bounds read in FFmpeg when used by Google Chrome prior to version 150.0.7871.47. The vulnerability could allow a remote attacker to read process memory via a crafted video file, with the impact described as high confidentiality risk and no changes to integrity/av...

CVE-2026-13859

The CVE-2026-13859 entry describes an issue in ANGLE used by Google Chrome, where an inappropriate ANGLE implementation prior to Chrome 150.0.7871.47 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected product/component: ANGLE in Chromium-based ...

CVE-2026-13854

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13854

This CVE concerns a Use-After-Free in Ozone within Google Chrome on Linux, before version 150.0.7871.47. The underlying issue is a memory safety flaw that could allow a remote attacker, who already compromised the renderer process, to escape the Chrome sandbox via a crafted HTML page. Affected co...

CVE-2026-13853

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13846

Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13841

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13840

CVE-2026-13840 concerns Google Chrome/Chromium where insufficient policy enforcement in Canvas allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (Chromium-based) prior to version 150.0.7871.47. Root cause: policy enforcement weakness in Ca...

CVE-2026-13839

CVE-2026-13839 corresponds to an issue in Google Chrome (CSS handling) where an inappropriate CSS implementation allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected software: Google Chrome prior to version 150.0.7871.47. Root cause: CSS/HTML rendering path...

CVE-2026-13838

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-13838

CVE-2026-13838 affects Google Chrome (Chromium-based) due to an inappropriate CSS implementation that permits bypassing the same-origin policy via a crafted HTML page. Affects versions prior to 150.0.7871.47; impact is a policy bypass (high severity). No exploit details or in-the-wild data provid...

CVE-2026-13837

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

CVE-2026-13837

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

CVE-2026-13834

The CVE-2026-13834 entry documents an issue in ANGLE used by Google Chrome before version 150.0.7871.47, where insufficient validation of untrusted input allowed a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE compo...

CVE-2026-13835

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-13835

CVE-2026-13835 : Google Chrome before 150.0.7871.47 is affected by an inappropriate implementation in XML that could allow a remote attacker to trigger heap corruption via a crafted HTML page. Impact is described as high severity; no exploit details are provided in the documents. Remediation: upd...

CVE-2026-13832

CVE-2026-13832 affects Google Chrome Headless prior to 150.0.7871.47, where a use-after-free in the Headless renderer could allow a remote attacker who has already compromised the renderer to bypass the sandbox via a crafted HTML page. The vulnerability is described as high impact with potential ...

CVE-2026-13828

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-13828

CVE-2026-13828 affects Google Chrome Enterprise prior to 150.0.7871.47 where an inappropriate implementation allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. This vulnerability enables memory disclosure and is described with Chromium ...

CVE-2026-13824

CVE-2026-13824 concerns Google Chrome extensions policy enforcement. The issue is described as insufficient policy enforcement in Chrome’s Extensions, allowing a remote attacker who has compromised the renderer process to escalate privileges via a crafted HTML page. The public notes specify the v...