CVE-2026-14055

CVE-2026-14055 affects Google Chrome on Windows before 150.0.7871.47, where insufficient validation of untrusted input in Device Trust could allow a remote attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is addressed by th...

CVE-2026-14155

Technical details are not publicly available in the provided documents for CVE-2026-14155; monitor for updates from the connected sources.

CVE-2026-14387

Summary (CVE-2026-14387) : An integer overflow in Skia used by Google Chrome prior to 150.0.7871.46 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The description appears consistently across NVD, CVE list, EUVD, and related feeds. The connected sour...

CVE-2026-17667

CVE-2026-17667 is a vulnerability in Google Chrome related to the ANGLE component. The issue is described as an uninitialized use in ANGLE that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The connected Chrome/Chromium advisory confirms the flaw and ties it to ...

CVE-2026-17721

CVE-2026-17721 : Out-of-bounds write in ANGLE within Google Chrome before 151.0.7922.72 could allow a remote attacker to attempt a sandbox escape via a crafted HTML page. The vulnerability is rooted in ANGLE, affecting Chrome's rendering/sandbox components, with a high severity (CRITICAL) per the...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

CVE-2026-17788

CVE-2026-17788 : In Google Chrome, an inappropriate implementation in the Blink rendering engine allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected versions are those before 151.0.7922.72. The Chromium advisory lists this as a Medium-severity issue with poten...

CVE-2026-17795

CVE-2026-17795 concerns Google Chrome’s GetUserMedia in the renderer. An inappropriate implementation prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer to leak cross-origin data via a crafted HTML page. This is described as a Chromium-level Medium severity ...

CVE-2026-18005

The CVE-2026-18005 issue is in the WebXR component of Google Chrome (Chromium) and upstream Chromium: inappropriate implementation in WebXR allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected product/version: Google Chrome/Chr...

CVE-2026-18015

CVE-2026-18015 affects Google Chrome on macOS prior to 151.0.7922.72, due to an inappropriate Tint implementation. A remote attacker could potentially perform a sandbox escape via a crafted HTML page. Severity indicators in the sources vary (Chromium notes Low severity; CVSS suggests high impact)...

CVE-2026-3537

Google Chrome on Android is affected by CVE-2026-3537 due to an object lifecycle issue in PowerVR that could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability affects builds prior to 145.0.7632.159, with Chromium/Chrome update notices indicating a fix in ...

CVE-2026-7337

CVE-2026-7337 describes a type confusion in V8 affecting Google Chrome prior to version 147.0.7727.138 . The issue enables a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product: Google Chrome (all supported platforms); root cause: Type Co...

CVE-2026-8514

CVE-2026-8514 describes a use-after-free in Chrome’s Aura component affecting the renderer process, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page on Chrome versions prior to 148.0.7778.168. The vulnerability is labeled Critical. Affected software is the Chro...

CVE-2026-8548

CVE-2026-8548 describes an out-of-bounds write in Chrome's Media path prior to 148.0.7778.168. The vulnerability requires a compromised renderer process and could allow a sandbox escape via a crafted HTML page, as described by multiple sources. The impact is high per the Chromium entry, and the C...

CVE-2026-9902

CVE-2026-9902 is a use-after-free in the Accessibility component of Google Chrome (Chromium) reported as affecting pre-148.0.7778.216. The issue could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The associated connect...

CVE-2026-9931

This CVE-2026-9931 entry describes a use-after-free in Chrome's GPU component prior to version 148.0.7778.216. A remote attacker who already compromised the renderer process could potentially escape the Chrome sandbox via a crafted HTML page. The impact is High (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:C/...

CVE-2026-9976

CVE-2026-9976 describes an inappropriate USB implementation in Google Chrome, affecting Chrome builds prior to 148.0.7778.216. A remote attacker could execute arbitrary code by presenting a crafted HTML page. The issue is documented across multiple feeds (NVD, ENISA EUVD, Red Hat, Debian tracker,...

CVE-2026-9979

CVE-2026-9979 affects Google Chrome: Insufficient validation of untrusted input in the Input component of Chromium before 148.0.7778.216. A remote attacker who has compromised the renderer process could bypass site isolation by presenting a crafted HTML page. The issue originates from an input va...

CVE-2026-9980

In Google Chrome (Chromium) Printing component, the vulnerability CVE-2026-9980 is caused by insufficient validation of untrusted input, allowing a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page. Impact is described as high severity; reme...

CVE-2011-0776

The CVE concerns Google Chrome’s sandbox on macOS prior to 9.0.597.84, where the sandbox implementation may allow remote attackers to obtain potentially sensitive information about local files via vectors related to the stat system call. Affected software: Chrome sandbox on macOS (pre-9.0.597.84)...

CVE-2011-1436

CVE-2011-1436 affects Google Chrome on Linux prior to 11.0.696.57, caused by improper interaction with the X Window System that can trigger a remote-denial of service (application crash) via unspecified vectors. The 11.0.696.57 Chrome patch (Stable Channel) addresses multiple vulnerabilities, inc...

CVE-2011-2786

Chrome prior to 13.0.782.107 is affected. The issue stems from the speech-input bubble not being reliably shown on screen, which could allow a remote attacker to record audio via a crafted web page containing an INPUT element. The provided documents describe the vulnerability and its potential im...

CVE-2011-2787

CVE-2011-2787 : Google Chrome prior to 13.0.782.107 is affected. The issue is a re-entrancy flaw in the GPU lock that can be exploited by remote attackers to cause a denial of service via unspecified vectors, potentially crashing the browser. The vulnerability is documented in CVE-2011-2787 as af...

CVE-2011-2822

Google Chrome on Windows prior to 13.0.782.215 is affected by CVE-2011-2822 due to URL parsing on the command line. The OpenVAS/NVD entries identify the flaw as a parsing issue with unspecified impact/attack vectors. A fix is available in Chrome 13.0.782.215 (and later), per vendor advisories sum...

CVE-2011-3955

CVE-2011-3955 affects Google Chrome/Chromium up to version 17.0.963.46, where an attacker could trigger an IndexedDB transaction abort, causing the application to crash or potentially other impact. The vulnerability is discussed in multiple advisories (e.g., Gentoo GLSA-201202-01) with explicit r...

CVE-2026-10898

CVE-2026-10898 : Stack buffer overflow in the GPU component of Google Chrome before 149.0.7827.53 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome versions prior to the fixed 149.0.7827.53; Chrome...

CVE-2026-10947

Affected software: Google Chrome (WebRTC component). Vulnerability: use-after-free in WebRTC leading to remote arbitrary code execution within the sandbox via a crafted HTML page. Scope: Chrome prior to version 149.0.7827.53 is impacted; patch level implied by the fixed version in the description...

CVE-2026-11031

CVE-2026-11031 affects Google Chrome’s Password Manager. The issue is insufficient validation of untrusted input, enabling a remote attacker to trigger UI spoofing via malicious network traffic. Affects Chrome versions prior to 149.0.7827.53 (Chromium security severity: Medium). CVSS v3.1: Base s...

CVE-2026-11039

CVE-2026-11039 describes an uninitialized use in Skia affecting Google Chrome prior to 149.0.7827.53, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Skia component within Chromium-based Chrome and is documented with a Medium severity...

CVE-2026-11052

Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allows a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. Affected: Chrome on Windows; component: GPU/renderer pathway; root cause: type confusion in GPU handling. Impact is sandbox es...

CVE-2026-11064

Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-11065

The CVE-2026-11065 issue is a use-after-free in ANGLE used by Google Chrome prior to 149.0.7827.53. If a renderer process is already compromised, an attacker could potentially escape the sandbox via a crafted HTML page. The impact is described as high/critical in overall runtime risk due to sandb...

CVE-2026-11153

The CVE C-2026-11153 affects Google Chrome (Chromium-based) and describes a side-channel information leak in Forms that allowed a remote attacker to exfiltrate cross-origin data via a crafted HTML page. Affected versions are prior to 149.0.7827.53; the issue is remedied by updating Chrome to the ...

CVE-2026-11200

CVE-2026-11200 concerns Google Chrome’s WebRTC implementation. A faulty WebRTC handling introduced in Chrome versions before 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The CVSS metrics indicateNETWORK attack vector, low to moderate access complexity...

CVE-2026-11224

CVE-2026-11224 describes a use-after-free in Chromoting for Google Chrome on Linux, before version 149.0.7827.53, that enables a remote attacker to execute arbitrary code via malicious network traffic. Chromium marks the severity as Low, but the base metrics show high impact on confidentiality, i...

CVE-2026-11234

CVE-2026-11234 affects Google Chrome prior to 149.0.7827.53. The issue is an incorrect implementation in FoldableAPIs that lets a remote attacker who has compromised the renderer process bypass site isolation via a crafted HTML page. The known impact is limited to bypassing site isolation, as des...

CVE-2026-11251

CVE-2026-11251 affects Google Chrome’s Password Manager. The root cause is insufficient policy enforcement, allowing a renderer-compromised remote attacker to bypass discretionary access control via a crafted HTML page. Affected software is Chrome prior to version 149.0.7827.53. The available sou...

CVE-2026-11641

The CVE-2026-11641 entry documents a use-after-free in Bluetooth handling within Google Chrome on Windows to 149.0.7827.103 and earlier. The underlying issue is a use-after-free in Bluetooth code that allows a remote attacker to execute arbitrary code if the user is tricked into performing specif...

CVE-2026-11671

Summary: CVE-2026-11671 is a use-after-free in Chrome’s Navigation path that could allow a remote attacker to escape the browser sandbox via a crafted HTML page, affecting Chrome builds prior to 149.0.7827.103. Impact: High (sandbox escape possibility; remote code execution potential) per Chromiu...

CVE-2026-11673

CVE-2026-11673 (Google Chrome/Chromium) Use-after-free in the InterestGroups component allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product/version: Google Chrome (Chromium) prior to 149.0.7827.103. Root cause: use-after-free in I...

CVE-2026-11674

CVE-2026-11674 affects Google Chrome (Guest View) on Chromium-based builds prior to 149.0.7827.103. The issue is a use-after-free in Guest View, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product/version: Google Chrome (before 149.0.7...

CVE-2026-11689

Technical details for CVE-2026-11689 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-11696

Google Chrome on Windows is affected by CVE-2026-11696 due to an uninitialized use in the Video component prior to 149.0.7827.103. A remote attacker who has already gained renderer process access could read potentially sensitive data from process memory via a crafted HTML page. Impact: disclosure...

CVE-2026-11699

CVE-2026-11699 : Use-after-free in Bluetooth in Google Chrome on macOS before 149.0.7827.103. This allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Impact: high. Remediation: upgrade to Chrome 149.0.7827.103 or later (as referenced by the Chrome release not...

CVE-2026-13791

Summary of findings (CVE-2026-13791): Google Chrome prior to version 150.0.7871.47 suffers from insufficient validation of untrusted input in Downloads, which can enable arbitrary code execution via a crafted Chrome Extension when a user installs a malicious extension. The vulnerability affects t...

CVE-2026-13792

CVE-2026-13792 is a use-after-free in Chrome for macOS Touch Bar prior to Chrome 150.0.7871.47 that could allow sandbox escape via a crafted HTML page. Connected sources confirm Chrome 150 includes fixes (e.g., 150.0.7871.47). Affected product: Google Chrome (macOS); vulnerable component: Touch B...

CVE-2026-14107

CVE-2026-14107 describes a use-after-free in Chrome’s Scheduling component, exploitable via a crafted HTML page to achieve remote code execution inside the sandbox. Affected software: Google Chrome, versions before 150.0.7871.47. Root cause: use-after-free in scheduling logic (Chromium). Impact: ...

CVE-2026-14109

CVE-2026-14109 describes insufficient policy enforcement in Mojo within Google Chrome prior to 150.0.7871.47, enabling a sandbox escape if a renderer process is compromised via a crafted HTML page. The connected Linux/Unix-facing records (Debian OSV, NVD, CVE lists, EUVD) corroborate: affected so...

CVE-2026-14122

The CVE-2026-14122 entry describes an issue in Google Chrome on Windows affecting the WebAppInstalls component of Chromium. The root cause is insufficient validation of untrusted input, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. The vulnerability impacts C...

CVE-2026-15132

CVE-2026-15132 affects Google Chrome (V8) with an Uninitialized Use in V8 that could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability is rated High (CVSS 3.1 base score 8.8) with network attack vector, requiring user interacti...