CVE-2026-76033

CVE-2026-76033 is an inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 . A remote attacker who had already compromised the renderer process could bypass site isolation via a crafted HTML page. The vulnerability was reported by Google on 2026-05-26 (bug 516715010) and c...

PT-2026-77320

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

PT-2026-77331

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19173

A flaw was found in Skia, a 2D graphics library utilized within Chromium-based browsers. A remote attacker, having already compromised the browser's renderer process, could exploit an out-of-bounds write vulnerability. This exploitation occurs by enticing a user to visit a specially crafted HTML...

CVE-2026-19557

A flaw was found in the TabStrip component of Chromium. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the browser's sandbox, leading to furthe...

CVE-2026-19144 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19173 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19169 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2PJC-WR33-2RRG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RHP6-Q4J8-V7V5 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8G9R-MP6V-7M38 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19172 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MH4H-C4W6-M987 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XC4C-849C-886M vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19160

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

CVE-2026-19161

A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data...

CVE-2026-19154

A flaw was found in Skia, a 2D graphics library used in Google Chrome on Android. A remote attacker, who has already compromised the browser's renderer process, could exploit this use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially...

CVE-2026-19148

A flaw was found in the GPU component of Google Chrome on Linux. A remote attacker, who has already compromised the renderer process, could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to...

CVE-2026-19137

A flaw was found in Google Chrome on Android. This vulnerability, a use-after-free error in the WebGL component, could be exploited by a remote attacker. After compromising the renderer process, the attacker could craft a malicious HTML page to trigger the flaw. This could potentially lead to a...