CVE-2026-10962

CVE-2026-10962 describes a Type Confusion in Media in Google Chrome prior to 149.0.7827.53 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected: Google Chrome (Chromium-based). Root cause: media type confusion as stated. Impact: high. R...

CVE-2026-10968

CVE-2026-10968 affects Google Chrome on Windows, specifically Dawn, with insufficient validation of untrusted input. The underlying issue allows a remote attacker who has compromised theRenderer process to leak cross-origin data through a crafted HTML page. Affected version range is before Chrome...

CVE-2026-10973

CVE-2026-10973 describes an uninitialized use in Dawn within Google Chrome, affecting Chrome builds prior to 149.0.7827.53. This vulnerability could allow a remote attacker to leak cross-origin data via a crafted HTML page. The description attributes impact to data leakage with network-exposed at...

CVE-2026-11010

CVE-2026-11010 affects Google Chrome on Android (WebShare) with a use-after-free in WebShare that can be triggered by a crafted HTML page when the renderer is compromised, potentially enabling a sandbox escape. The issue is described as MEDIUM severity and is tied to Chrome versions prior to 149....

CVE-2026-11017

CVE-2026-11017 affects Google Chrome/Chromium: Inappropriate implementation in Link Preview allows a renderer-compromised remote attacker to bypass navigation restrictions with a crafted HTML page. Debian/Chromium advisories fix the issue in Chromium/Chrome to 149.0.7827.53 (e.g., Debian: 149.0.7...

CVE-2026-11040

Summary : CVE-2026-11040 describes a use-after-free in ANGLE used by Google Chrome/Chromium prior to 149.0.7827.53. If a renderer process is compromised, an attacker could potentially escape the sandbox by loading a crafted HTML page. The vulnerability is categorized with a Chromium security seve...

CVE-2026-11109

CVEs details and impact 1 : CVE-2026-11109 is an uninitialized-use vulnerability in ANGLE used by Google Chrome (Chromium-based). The issue is described as an uninitialized use in ANGLE that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The affected product is G...

CVE-2026-11147

The CVE-2026-11147 vulnerability is a use-after-free in WebML within Google Chrome for Windows, located in the Chromium-based WebML implementation. The issue allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected software/version: Google Chrome on ...

CVE-2026-11191

CVE-2026-11191 affects ANGLE in Google Chrome. The issue is an out-of-bounds memory access when handling crafted HTML pages, enabling remote attackers to trigger memory access issues. The public detail notes this occurs in Chrome before and up to version 149.0.7827.53; patch: update to Chrome 149...

CVE-2026-11256

CVE-2026-11256 : Integer overflow in Chrome’s GPU path before 149.0.7827.53 may allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page. Affected: Google Chrome (GPU/renderer). Root cause: integer overflow in GPU code. Impact: sandbox escape ...

CVE-2026-11273

CVE-2026-11273 affects Google Chrome’s Omnibox. The issue is caused by insufficient validation of untrusted input, allowing a remote attacker to trigger UXSS via a crafted HTML page when a user visits a page and engages specific UI gestures. The documented impact is relative to UXSS with a Low se...

CVE-2026-11279

CVE-2026-11279 affects Google Chrome DevTools; an out-of-bounds read in DevTools could allow a remote attacker to run arbitrary code inside the browser sandbox via a crafted HTML page. Affected version range is Chrome versions before 149.0.7827.53. The issue is described with Chromium security se...

CVE-2026-11292

CVE-2026-11292 : A CSP bypass vulnerability in Blink used by Google Chrome prior to 149.0.7827.53 allows remote attackers to bypass content security policy through a crafted HTML page. Affected component is Blink in Chrome/Chromium; exploitation is possible over the network with user interaction ...

CVE-2026-11296

The CVE-2026-11296 entry concerns the Google Chrome ImageCapture component. Affected software: Google Chrome prior to version 149.0.7827.53. Root cause: Inappropriate implementation in ImageCapture enables a remote attacker who has already compromised the renderer process to escalate privileges v...

CVE-2026-11302

CVE-2026-11302 affects Chrome on iOS (Google Chrome) prior to version 149.0.7827.53. The issue is caused by insufficient policy enforcement in the browser, allowing a remote attacker to bypass discretionary access control via a crafted HTML page. Impact is described as a partial elevation of acce...

CVE-2026-11629

CVE-2026-11629 is a Use-after-Free in Chrome’s Ozone component that could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected software is Google Chrome, with the vulnerability present in builds prior to 149.0.7827.103. Remediation is provided by the Chrome Stable up...

CVE-2026-11650

CVE-2026-11650 : Use after free in V8 (Google Chrome) prior to 149.0.7827.103 enables remote code execution inside a sandbox via a crafted HTML page. Affected software is Google Chrome’s V8 engine; impact is high as per Chromium advisory. The connected sources indicate the vulnerability arises fr...

CVE-2026-11657

CVE-2026-11657 covers a use-after-free in Chrome’s Payments component on macOS, allowing remote code execution via a crafted HTML page. Affected product: Google Chrome on Mac (before version 149.0.7827.103). Underlying issue: use-after-free in Payments. Impact: arbitrary code execution with high ...

CVE-2026-11664

This CVE (CVE-2026-11664) affects Google Chrome’s Payments component and concerns a use-after-free in the Payments pathway that could enable remote heap corruption via a crafted HTML page. The vulnerability is rooted in use-after-free semantics within Chromium’s Payments code, leading to potentia...

CVE-2026-11687

Summary: CVE-2026-11687 is a use-after-free in Dawn within Google Chrome for Mac, leading to potential heap corruption via a crafted HTML page. The underlying issue is a use-after-free in Dawn, with impact described as a remote attacker able to cause high-severity outcomes (confidentiality, integ...

CVE-2026-11693

CVE-2026-11693 affects Google Chrome prior to version 149.0.7827.103, due to an inappropriate implementation in Plugins that allowed a rendered-page compromise to bypass site isolation via a crafted HTML page. The issue enables a remote attacker who already has renderer access to impact isolation...

CVE-2026-11694

Technical details (affected product, root cause, exploitability) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-11698

CVE-2026-11698 affects Google Chrome on macOS. The connected documents confirm a use-after-free in the Bluetooth subsystem of Chrome/Chromium, leading to a potential heap corruption condition when processing a crafted HTML page. The vulnerability is triggered in Chrome builds prior to version 149...

CVE-2026-13814

CVE-2026-13814 affects Google Chrome (Views) with use-after-free in the rendering/Views UI path, prior to 150.0.7871.47. Root cause: use-after-free leading to potential heap corruption. Attack flow requires user interaction (specific UI gestures) and a crafted HTML page; impact is high confidenti...

CVE-2026-13830

CVE-2026-13830 affects Chromoting in Google Chrome on Linux prior to 150.0.7871.47. The flaw is a use-after-free in Chromoting that allows a remote attacker to execute arbitrary code via malicious network traffic. The documented impact is high severity with the standard CVSS vector: AV:A/AC:L/PR:...

CVE-2026-13833

CVE-2026-13833 : Uninitialized use in ANGLE within Google Chrome on macOS allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome on Mac; vulnerability exists in versions prior to 150.0.7871.47. Remediation: update Chrome to 150.0.7871.47 or later. ...

CVE-2026-13840

CVE-2026-13840 concerns Google Chrome/Chromium where insufficient policy enforcement in Canvas allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (Chromium-based) prior to version 150.0.7871.47. Root cause: policy enforcement weakness in Ca...

CVE-2026-13848

CVE-2026-13848 : Use-after-free in Chrome Forms allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected software: Google Chrome versions prior to 150.0.7871.47 (Chromium-based). Root cause: use-after-free within Forms handling. Impact: high (remote ...

CVE-2026-13859

The CVE-2026-13859 entry describes an issue in ANGLE used by Google Chrome, where an inappropriate ANGLE implementation prior to Chrome 150.0.7871.47 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected product/component: ANGLE in Chromium-based ...

CVE-2026-13876

CVE-2026-13876 involves an inappropriate implementation in the Network stack of Google Chrome before version 150.0.7871.47 . The issue allows an attacker with a privileged network position to bypass the page content Security Policy (CSP) through malicious network traffic. The connected documents ...

CVE-2026-13885

Summary: CVE-2026-13885 is a use-after-free in Skia used by Google Chrome on Android, allowing remote code execution via a crafted HTML page. Affected product/component: Skia within Chrome on Android; Root cause: use-after-free in Skia rendering path. Impact: arbitrary code execution inside the b...

CVE-2026-13896

The connected sources confirm CVE-2026-13896 affects Google Chrome (Chromium-based) with insufficient policy enforcement in “Glic” prior to version 150.0.7871.47, enabling a remote attacker to bypass navigation restrictions via a crafted HTML page. The impact is described as medium. The vulnerabi...

CVE-2026-13940

Technical details (affected product/version, root cause, exploitability) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-13993

The CVE-2026-13993 vulnerability affects Google Chrome WebAppInstalls via an Incorrect security UI flaw that allows domain spoofing when a user is induced to perform specific UI gestures on a crafted HTML page. Affected software is Chrome (Chromium-based) with versions prior to 150.0.7871.47. The...

CVE-2026-14001

CVE-2026-14001 corresponds to an UXSS vulnerability in Google Chrome. The issue is an inappropriate implementation in the network stack that affects Chrome prior to 150.0.7871.47, enabling a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. The vulnerability is describe...

CVE-2026-14018

CVE-2026-14018 describes a use-after-free in Chrome’s Updater on Windows prior to 150.0.7871.47, enabling a local attacker to escalate privileges via a malicious file. Affected software: Google Chrome (Windows). Root cause: use-after-free in the Updater component. Impact: OS-level privilege escal...

CVE-2026-14048

The CVE-2026-14048 entry describes a Use-After-Free in Chromecast components of Google Chrome before version 150.0.7871.47. The issue could allow a local-network attacker to read potentially sensitive data from a Chrome process memory via a malicious peripheral. The connected EUVD and NVD entries...

CVE-2026-14067

CVE-2026-14067 is a use-after-free vulnerability in Chrome for iOS (Google Chrome on iOS) prior to version 150.0.7871.47. The flaw allows a remote attacker to execute arbitrary code via a crafted HTML page. Across multiple sources (NVD, Debian OSV, EUVD ENISA, CVE lists), the issue is described c...

CVE-2026-14089

CVE-2026-14089 affects Google Chrome’s PopupBlocker: insufficient validation of untrusted input before version 150.0.7871.47 enables a remote attacker who already compromised the renderer process to perform UI spoofing via a crafted HTML page. The CVE’s metrics indicate a CVSS v3.1 base score of ...

CVE-2026-14388

The CVE-2026-14388 describes an out-of-bounds read in ANGLE used by Google Chrome, allowing a remote attacker to leak potentially sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome/ANGLE; vulnerable component is ANGLE in the browser. The issue is triggere...

CVE-2026-14393

CVE-2026-14393: Use-after-free in V8 (Chrome) allows remote code execution inside the sandbox via a crafted HTML page. Affected: Google Chrome's V8 engine prior to version 150.0.7871.46. Impact: arbitrary code execution with high/total impact as per the CVSS vector. Remediation: update to Chrome ...

CVE-2026-17664

CVE-2026-17664 affects Google Chrome loaders prior to 151.0.7922.72. Insufficient validation of untrusted input in the Loader can permit a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The CVE is documented with Chromium-related severi...

CVE-2026-17716

CVE-2026-17716 describes a use-after-free flaw in Chrome’s Updater on macOS, allowing a local attacker to escalate privileges via malicious network traffic. Affected: Google Chrome/Chromium Updater on Mac. Root cause: use-after-free in Updater. Impact: privilege escalation with high severity (per...

CVE-2026-17777

CVE-2026-17777: Google Chrome autofill in Chromium-based builds prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Impact is MEDIUM (CVSS 3.1: 4.3). Attack vector: NETWORK; privileges: NONE; user interaction required; scope: UNCHANGED; confidentiali...

CVE-2026-17807

CVE-2026-17807 describes a Use-after-free in V8 within Google Chrome, affecting Chrome versions prior to 151.0.7922.72. The underlying issue is a use-after-free in V8 triggered by crafted HTML pages, allowing a remote attacker to execute arbitrary code inside the Chrome sandbox. Public references...

CVE-2026-17823

CVE-2026-17823 affects Google Chrome’s WebXR component, where insufficient policy enforcement could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is described as present in Chrome prior to version 151.0.7922.72; affected user impact is defined...

CVE-2026-17830

CVE-2026-17830 concerns Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, where an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Root cause: implementation flaw in the iOS Chromium-based webview. Impact: navigation re...

CVE-2026-17845

The CVE-2026-17845 issue is an Inappropriate implementation in the CSS component of Google Chrome/Chromium that enables UXSS by crafting HTML pages. Affected software: Google Chrome (Chromium-based) with CSS handling before version 151.0.7922.72. Root cause: CSS implementation flaw in Chromium le...

CVE-2026-17897

CVE-2026-17897 affects Google Chrome/Chromium’s ORB implementation. A remote attacker could leak cross-origin data via a crafted HTML page due to an inappropriate ORB implementation, with the vulnerability present in Chrome prior to 151.0.7922.72. A remediation is provided in the 2026-07 stable-c...

CVE-2026-17953

CVE-2026-17953 : An insufficient policy enforcement flaw in the WebView component of Chromium-based Google Chrome on Android allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Upstream and Red Hat notes attribute the issue to inadequate WebView policy enforcement;...