CVE-2026-9957

CVE-2026-9957 describes a use-after-free in Google's Chrome PDF handling (Chromium) prior to version 148.0.7778.216. A crafted PDF could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox. The public references confirm the vulnerability in the PDF component of Chromium with...

CVE-2026-7338

CVE-2026-7338: Use-after-free in Cast in Google Chrome prior to 147.0.7727.138 allows a local-network attacker to potentially trigger heap corruption via malicious network traffic. Affected product: Google Chrome (Cast component); root cause is a use-after-free in Cast. Remediation: update Chrome...

CVE-2026-7898

CVE-2026-7898 describes a Use-after-free in Chromoting within Google Chrome on Linux, prior to version 148.0.7778.96. The vulnerability enables a remote attacker to execute arbitrary code via malicious network traffic, with a Chromium security severity of Critical and a CVSS v3.1 base score of 8....

CVE-2026-7906

CVE-2026-7906 is a Chrome SVG use-after-free vulnerability affecting Chrome prior to 148.0.77 78.96. A crafted HTML page could trigger a remote exploit to execute arbitrary code inside the Chrome sandbox. Connected advisories corroborate the issue as a use-after-free in SVG rendering with high se...

CVE-2026-7931

CVE-2026-7931 affects Google Chrome on iOS (pre-148.0.7778.96). The issue is due to insufficient validation of untrusted input, enabling a remote attacker to spoof UI via a crafted HTML page. The Chrome 148 release (148.0.7778.96) provides fixes across platforms, with Chrome’s stable channel upda...

CVE-2026-7957

The CVE-2026-7957 entry concerns Google Chrome on Mac and iOS versions before 148.0.7778.96, where an out-of-bounds write in the Media component could allow a remote attacker who already has renderer access to run arbitrary code inside the Chrome sandbox via a crafted HTML page. Concrete details ...

CVE-2026-7995

CVE-2026-7995 : Out-of-bounds read in Chrome’s AdFilter component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page when using Chrome versions prior to 148.0.7778.96. The vulnerability affects Google Chrome (desktop) and is fixed in Chrome 148.0.7778.96...

CVE-2026-8001

CVE-2026-8001 involves a Use After Free in Google Chrome’s printing component for Linux, macOS, and ChromeOS. The vulnerability, present in Chrome builds prior to 148.0.7778.96, could allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a ...

CVE-2026-8006

Google Chrome prior to 148.0.7778.96 contains a vulnerability in DevTools where insufficient policy enforcement allows UI spoofing if a user installs a crafted extension. Affected: DevTools UI handling within Chrome’s browser environment (Chrome 148 before the patch). Root cause: insufficient pol...

CVE-2026-8016

CVE-2026-8016 describes a use-after-free in WebRTC within Google Chrome before version 148.0.7778.96, allowing a remote attacker to execute arbitrary code in the browser sandbox via a crafted HTML page. Affected software is Google Chrome (WebRTC component); root cause is use-after-free in WebRTC ...

CVE-2026-8019

CVE-2026-8019 describes insufficient policy enforcement in the Chrome WebApp, allowing a remote attacker to trigger UI spoofing through a crafted HTML page in Chrome versions before 148.0.7778.96. The root cause is restricted policy enforcement within WebApp handling. Impact is UI spoofing; no ex...

CVE-2026-8551

CVE-2026-8551 describes a use-after-free in the Downloads component of Google Chrome affecting versions prior to 148.0.7778.168 . The vulnerability allows a remote attacker to cause arbitrary code execution by convincing a user to perform specific UI gestures on a crafted HTML page. This is an in...

CVE-2026-8562

CVE-2026-8562 describes a side-channel information leakage flaw in the Navigation component of Google Chrome (upstream Chromium) prior to 148.0.7778.168. A crafted HTML page could leak cross-origin data, as indicated by multiple sources (NVD/Red Hat/ Debian trackers) and upstream Chromium bug 400...

CVE-2026-9877

CVE-2026-9877 is a use-after-free in ANGLE within Google Chrome prior to 148.0.7778.216, enabling a remote attacker who compromises the renderer to potentially escape the sandbox via a crafted HTML page. Affected product: Google Chrome (ANGLE component in Chromium). Root cause: use-after-free in ...

CVE-2026-9904

CVE-2026-9904 affects Google Chrome via a Use-After-Free in ANGLE, with the root cause in ANGLE’s memory management. A crafted HTML page could potentially escape the Chrome sandbox, as described in multiple sources. A fix is available in Chrome 148.0.7778.216 (and surrounding 148.0.7778.215/217 f...

CVE-2026-9927

Summary: CVE-2026-9927 concerns a use-after-free in the ANGLE component of Google Chrome. The issue affects Chrome builds prior to version 148.0.7778.216 and could allow a remote attacker to execute arbitrary code within the browser sandbox via a crafted HTML page. Affected software: ANGLE in Goo...

CVE-2026-9935

Summary (CVE-2026-9935): Uninitialized Use in ANGLE affects Google Chrome’s ANGLE component, prior to version 148.0.7778.216. The root cause is an uninitialized use flaw in ANGLE, allowing a remote attacker to leak cross-origin data through a crafted HTML page. The CVSSv3.1 vector (AV:N/AC:L/PR:N...

CVE-2026-9954

CVE-2026-9954 affects Google Chrome (Chromium TabStrip). A use-after-free in the TabStrip component prior to version 148.0.7778.216 allows a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability is documented acro...

CVE-2026-9960

The CVE-2026-9960 entry concerns an integer overflow in PDFium within Google Chrome prior to 148.0.7778.216. A remote attacker who gains renderer process access could trigger arbitrary code execution inside the sandbox by processing a crafted font file. Affected software: Chromium-based Chrome wi...

CVE-2026-9961

This CVE concerns a use-after-free in SurfaceCapture in Google Chrome prior to 148.0.7778.216, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. Root cause: use-after-free in SurfaceCapture. Impact: high severity (C:H/I:H/A:H). Mitigation: upgrade Chrome to ...

CVE-2026-9962

CVE-2026-9962 describes a use-after-free flaw in WebRTC within the Chromium-based Google Chrome browser. The issue allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, with impact reported as high. Affected software: Google Chrome (WebRTC component in Chrom...

CVE-2026-9988

Technical details (affected product/version, root cause, mitigation) are not publicly available in the provided documents. Monitor for updates.

CVE-2025-11460

CVE-2025-11460 is a use-after-free vulnerability in Google Chrome's Storage, allowing remote code execution via a crafted video file. The issue is tied to Chromium and affects Chrome prior to version 141.0.7390.65, with impact described as arbitrary code execution in the browser process. Public d...

CVE-2026-10894

CVE-2026-10894 (Chrome on Linux): Use-after-free in Printing component allows sandbox escape when a renderer is compromised via a crafted HTML page. Affected: Google Chrome for Linux prior to 149.0.7827.53. Impact as stated: remote attacker could potentially escape the sandbox. Root cause per des...

CVE-2026-10914

The CVE-2026-10914 entry affects ANGLE in Google Chrome on Windows. The issue is a Use-after-Free in ANGLE that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome with ANGLE enabled, prior to version 149.0....

CVE-2026-10919

The CVE-2026-10919 entry is for a Use-after-Free vulnerability in ANGLE that affects Google Chrome prior to version 149.0.7827.53. The issue could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page, as reported...

CVE-2026-10920

CVE-2026-10920 affects Google Chrome on macOS. Insufficient validation of untrusted input in the WebShare component could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. According to the connected sources, this is a Chromium/We...

CVE-2026-10938

CVE-2026-10938 affects Google Chrome before version 149.0.7827.53, where an inappropriate implementation in the Input handling of the renderer process allows a remote attacker who has compromised the renderer to bypass site isolation via a crafted HTML page. The impact is described as high (I/H) ...

CVE-2026-10945

Summary: CVE-2026-10945 is a use-after-free in Google Chrome’s PDF handling prior to 149.0.7827.53. A remote attacker could lure a user into specific UI gestures to trigger execution of arbitrary code inside the browser sandbox via a crafted PDF file. The impact is high (arbitrary code execution ...

CVE-2026-10954

CVE-2026-10954 describes a use-after-free in Chrome’s Actor component, leading to remote code execution inside the sandbox when processing a crafted HTML page. Affected product: Google Chrome. Vulnerable version range: prior to 149.0.7827.53; remediation guidance in the description suggests updat...

CVE-2026-10956

Summary of CVE-2026-10956 Affected software: Google Chrome (MimeHandlerView component). Vulnerability: Use-after-free in MimeHandlerView leading to potential remote code execution via a crafted HTML page. This could allow arbitrary code execution within the Chrome sandbox. Impact: High severity p...

CVE-2026-11006

This CVE (CVE-2026-11006) affects Google Chrome prior to 149.0.7827.53, specifically the Dawn component. The root cause is an out-of-bounds read in Dawn, exploitable via a crafted HTML page by a remote attacker. The vulnerability impacts Chrome on desktop environments and is addressed by the Chro...

CVE-2026-11018

CVE-2026-11018 affects Google Chrome (Chromium-based). The issue is described as insufficient policy enforcement in the Actor component, enabling a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact is described as allow bypass of navigation restrictions; no other e...

CVE-2026-11042

CVE-2026-11042 is a use-after-free in Chrome’s Views component (Chromium) that could allow heap corruption. A crafted HTML page and user interaction (specific UI gestures) may trigger exploitation before Chrome build 149.0.7827.53. The issue affects Google Chrome (Views subsystem) and is tied to ...

CVE-2026-11046

CVE-2026-11046: In Google Chrome, insufficient validation of untrusted input in the Media component allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Affected version range is before 149.0.7827.53; the issue is...

CVE-2026-11068

Summary: CVE-2026-11068 is a use-after-free in Chrome’s WebSockets implementation that could allow remote code execution inside a sandbox. The issue affects Google Chrome builds prior to version 149.0.7827.53. The vulnerability description across multiple sources aligns on the same root cause and...

CVE-2026-11073

CVE-2026-11073 describes a use-after-free in WebGL in Google Chrome prior to 149.0.7827.53 , enabling a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected software: Google Chrome (WebGL). Root cause: use-after-free in WebGL. Impact: c...

CVE-2026-11090

CVE-2026-11090 describes an uninitialized use in ANGLE within Google Chrome prior to version 149.0.7827.53 , enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue affects ANGLE components used by Chrome; the underlying impact is described as potential exposure of...

CVE-2026-11091

CVE-2026-11091 affects Dawn in Google Chrome prior to version 149.0.7827.53. The root cause is an inappropriate implementation that enables out-of-bounds memory access via a crafted HTML page. Impact is described as potentially enabling a remote attacker to cause memory access violations; CVSS me...

CVE-2026-11096

CVE-2026-11096 details an out-of-bounds read in WebRTC for Google Chrome, prior to 149.0.7827.53. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Affected product/component: WebRTC in Chrome (Chromium-based). Roo...

CVE-2026-11122

CVE-2026-11122 affects Google Chrome (Chromium) before 149.0.7827.53. The issue is an Inappropriate implementation in Keyboard, enabling a remote attacker to inject arbitrary scripts/HTML (UXSS) via a crafted HTML page. Affected product/versions include Chrome/Chromium across platforms; Debian ad...

CVE-2026-11135

CVE-2026-11135 describes insufficient policy enforcement in Chrome Autofill, allowing a remote attacker to bypass discretionary access control via a crafted HTML page. Affected software is Google Chrome (Chromium) prior to 149.0.7827.53. Root cause: incomplete enforcement of policy in Autofill fu...

CVE-2026-11140

CVE-2026-11140 corresponds to an out-of-bounds read in Chromecast within Google Chrome before version 149.0.7827.53. The issue is triggered when a renderer process is compromised and processes a crafted HTML page, allowing a remote attacker to read potentially sensitive information from the proce...

CVE-2026-11143

CVE-2026-11143 concerns Google Chrome on Linux prior to 149.0.7827.53, where an issue in the Extensions component (described variously as a heap/buffer issue and an out-of-bounds read) could allow an attacker who persuades a user to install a malicious extension to extract potentially sensitive d...

CVE-2026-11144

Consolidated details for CVE-2026-11144: A use-after-free in the Media component of Google Chrome (Chromium-based) allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted video file. Affected software: Google Chrome versions before 149.0.7827.53. Root cause: use-a...

CVE-2026-11157

Summary: CVE-2026-11157 is a UXSS vulnerability in Google Chrome’s Accessibility feature exploitable via a crafted Chrome Extension. The issue occurs in Chrome builds prior to 149.0.7827.53 and could allow an attacker, by convincing a user to install a malicious extension, to inject arbitrary scr...

CVE-2026-11169

The CVE-2026-11169 issue affects Google Chrome (Chromium-based) and is described as an inappropriate XML implementation that enables UXSS via a crafted XML file. Affected software is Chrome prior to version 149.0.7827.53. The underlying cause is an improper XML handling path within Chrome/Chromiu...

CVE-2026-11172

Technical details about CVE-2026-11172 are not publicly available in the provided documents; monitor sources for updates.

CVE-2026-11183

CVE-2026-11183 describes an out-of-bounds read in GWP-ASan used by Google Chrome, allowing a local attacker to read potentially sensitive data from a process’s memory via a malicious file. Affected software: Google Chrome (GWP-ASan component). Impact: potential exposure of sensitive information; ...

CVE-2026-11187

CVE-2026-11187 affects Google Chrome prior to 149.0.7827.53 due to an inappropriate implementation in Glic that allowed a remote attacker to bypass navigation restrictions with a crafted HTML page. Impact is described as a module-level navigation bypass with MEDIUM severity (CVSS 6.3). The vulner...