CVE-2026-13834

The CVE-2026-13834 entry documents an issue in ANGLE used by Google Chrome before version 150.0.7871.47, where insufficient validation of untrusted input allowed a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE compo...

CVE-2026-13846

CVE-2026-13846 affects Google Chrome on macOS, caused by a use-after-free in USB handling that could allow a sandbox escape when a renderer process is compromised and a crafted HTML page is loaded. Impact described as high/highest severity; no exploitation details are provided in the source docum...

CVE-2026-13851

The provided CVE-2026-13851 entry concerns Google Chrome on Android, where WebAppInstalls suffers from insufficient validation of untrusted input. A crafted HTML page can bypass discretionary access control due to this flaw, with the issue affecting Chrome versions prior to 150.0.7871.47. The con...

CVE-2026-13863

The CVE-2026-13863 entry describes insufficient validation of untrusted input in CustomTabs for Google Chrome on Android, prior to version 150.0.7871.47, enabling a local privilege escalation via a malicious file. Affected component: Chrome’s CustomTabs on Android; root cause: inadequate input va...

CVE-2026-13868

Technical details (affected components, root cause, fixes) are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2026-13892

CVE-2026-13892 concerns Chrome for iOS before version 150.0.7871.47, where an inappropriate implementation allowed a remote attacker who lured a user into specific UI gestures to leak cross-origin data via a crafted HTML page. The issue affects Chrome on iOS (Chromium-based) and has a Medium seve...

CVE-2026-13899

CVE-2026-13899 affects Google Chrome (Chromium) prior to 150.0.7871.47, with a use-after-free in HTML that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Impact is rated high (C/H/I/A: High). The vulnerability is addressed by updating to Chrome 150....

CVE-2026-13901

The connected advisories identify CVE-2026-13901 as a Chrome/Chromium issue where insufficient policy enforcement in the Serial sandbox allowed a renderer-compromised page to potentially escape the sandbox via a crafted HTML page. Affected product: Google Chrome (Chromium-based) with versions pri...

CVE-2026-13911

CVE-2026-13911 concerns Google Chrome’s Spellcheck: insufficient policy enforcement could allow a renderer-compromised attacker to read potentially sensitive data from process memory via a crafted HTML page. Affected are Chrome builds prior to 150.0.7871.47; exploitation is described as remote, r...

CVE-2026-13913

CVE-2026-13913 affects Autofill in Google Chrome on iOS. The root cause is insufficient policy enforcement, allowing a remote attacker who entices a user to perform specific UI gestures to leak cross-origin data via a crafted HTML page. The vulnerability concerns Chrome/iOS versions prior to 150....

CVE-2026-13924

CVE-2026-13924 affects WebView in Google Chrome on Android, prior to version 150.0.7871.47. The issue is insufficient validation of untrusted input in WebView, allowing a remote attacker who already compromised the renderer process to bypass the same-origin policy via a crafted HTML page. The vul...

CVE-2026-13934

Affected software: Google Chrome (Android) with Dawn. Vulnerability: insufficient validation of untrusted input in Dawn could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. Impact: potential sandbox escape, high/critical implications per CVSS (base 9.6). Affe...

CVE-2026-13949

Technical details about CVE-2026-13949 are not publicly available in the provided documents. The records reference the vulnerability in Chrome on Android, but no concrete impact, affected versions, exploits, or remediation steps are included. Monitor for updates.

CVE-2026-13970

CVE-2026-13970 : In Google Chrome, an uninitialized-use vulnerability in the Media component allows a remote attacker who has compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. Affected versions are before 150.0.7871.47. Impact is info...

CVE-2026-13978

CVE-2026-13978 affects Google Chrome; Insufficient policy enforcement in PageInfo allows UI spoofing via a crafted HTML page in versions prior to 150.0.7871.47. The issue has a CVSS 3.1 base score of 4.3 (Medium) with network attack vector, no confidentiality or availability impact, and user inte...

CVE-2026-14001

CVE-2026-14001 corresponds to an UXSS vulnerability in Google Chrome. The issue is an inappropriate implementation in the network stack that affects Chrome prior to 150.0.7871.47, enabling a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. The vulnerability is describe...

CVE-2026-14021

Affected software: Google Chrome (StorageAccessAPI in Chromium). Vulnerability: insufficient policy enforcement allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Versions: prior to 150.0.7871.47. Impact: cross-origin data leakage...

CVE-2026-14050

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-14050.

CVE-2026-14067

CVE-2026-14067 is a use-after-free vulnerability in Chrome for iOS (Google Chrome on iOS) prior to version 150.0.7871.47. The flaw allows a remote attacker to execute arbitrary code via a crafted HTML page. Across multiple sources (NVD, Debian OSV, EUVD ENISA, CVE lists), the issue is described c...

CVE-2026-14074

Google Chrome on iOS prior to 150.0.7871.47 is affected by a side-channel information leakage in WebAuthentication that can leak cross-origin data via a crafted HTML page. The issue affects Chrome’s WebAuthentication component; the public references place a Low severity (CVSS 3.1: 6.5, MEDIUM) an...

CVE-2026-14085

CVE-2026-14085: A side‑channel information leakage in CSS in Google Chrome (Chromium) before 150.0.7871.47 allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome (CSS rendering path). Root cause: side‑channel exposure in CSS handling; impact i...

CVE-2026-14094

Summary (CVE-2026-14094) : A use-after-free flaw in the Chrome Windows Installer component allows a local attacker to escalate to OS-level privileges by loading a malicious file. Affected software: Google Chrome on Windows (prior to version 150.0.7871.47). Root cause: use-after-free in the Instal...

CVE-2026-14103

According to the connected documents, CVE-2026-14103 is a use-after-free bug in SSL handling on Google Chrome running on ChromeOS, prior to version 150.0.7871.47. The vulnerability could allow a remote attacker to obtain potentially sensitive data from process memory via a crafted HTML page. The ...

CVE-2026-14110

The CVE-2026-14110 entry concerns Google Chrome’s DarkMode implementation. Affected product: Google Chrome (Chromium-based) before version 150.0.7871.47. Issue: Inappropriate DarkMode implementation allows a remote attacker to achieve UI spoofing via a crafted HTML page. Root cause: improper hand...

CVE-2026-14134

CVE-2026-14134 affects Google Chrome for Android: an inappropriate Autofill implementation allows UI spoofing via a crafted HTML page on versions before 150.0.7871.47. Root cause is improper Autofill handling; impact is UI spoofing with remote exploitation potential. Mitigation is updating to 150...

CVE-2026-14147

CVE-2026-14147 concerns Google Chrome prior to 150.0.7871.47, where an inappropriate implementation in CSS enables UXSS by a crafted HTML page. The vulnerability permits a remote attacker to inject arbitrary scripts or HTML, potentially affecting user sessions and page content (impacting confiden...

CVE-2026-14388

The CVE-2026-14388 describes an out-of-bounds read in ANGLE used by Google Chrome, allowing a remote attacker to leak potentially sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome/ANGLE; vulnerable component is ANGLE in the browser. The issue is triggere...

CVE-2026-14400

Summary of CVE-2026-14400 : Google Chrome’s ANGLE component contains an out-of-bounds write in versions prior to 150.0.7871.46. If a renderer process is compromised, an attacker could potentially perform a sandbox escape through a crafted HTML page. This is a remote, high-severity vulnerability (...

CVE-2026-15117

CVE-2026-15117 affects Google Chrome (Payments component). A use-after-free in Payments can lead to heap corruption when a user is convinced to perform specific UI gestures on a crafted HTML page. Affected version: before 150.0.7871.115. The issue is triggered by interactions with the UI and can ...

CVE-2026-15126

CVE-2026-15126 affects Google Chrome: a use-after-free in the Forms component can allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected software: Google Chrome versions prior to 150.0.7871.115. Root cause: use-after-free in Forms. Impact: high seve...

CVE-2026-15776

CVE-2026-15776 affects Google Chrome/V8: an inappropriate implementation in V8 allowed remote code execution inside the sandbox via a crafted HTML page before Chrome 150.0.7871.125. The issue is addressed in the Chrome Stable Channel Update, which upgrades to 150.0.7871.125 (Windows/Mac) and 150....

CVE-2026-2315

CVE-2026-2315 affects Google Chrome’s WebGPU implementation prior to 145.0.7632.45, where an inappropriate WebGPU implementation could allow a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Severity is High; the vulnerability is mitigated by upgrading to Chrome 14...

CVE-2026-3913

CVE-2026-3913 is a heap buffer overflow in WebML of Google Chrome, fixed in Chrome 146.0.7680.71 (and associated packaging for Debian). The vulnerability allows remote heap corruption via a crafted HTML page. Affected component: WebML in Chromium/Chrome. Root cause: heap buffer overflow. Impact: ...

CVE-2026-3917

CVE-2026-3917 corresponds to a use-after-free in Google Chrome’s Agents component, leading to potential heap corruption via a crafted HTML page. The vulnerability is described across multiple sources as affecting Chrome/Chromium and tied to Agents resource management; the issue is categorized as ...

CVE-2026-3922

CVE-2026-3922 is a confirmed vulnerability in Google Chrome/Chromium involving a use-after-free in the MediaStream path. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with the impact described as high. Affected product/version details present i...

CVE-2026-4441

CVE-2026-4441 is a Google Chrome/Chromium use-after-free in the Base component causing potential heap corruption on crafted HTML pages, fixed in Chrome 146.0.7680.153 (and Linux/builds referenced by Debian: 146.0.7680.153-1~deb12u1/ -1~deb13u1). Affected product: Google Chrome (Chromium core); ro...

CVE-2026-4459

Chrome WebAudio: CVE-2026-4459 - Out-of-bounds read/write in WebAudio before 146.0.7680.153 may enable remote heap corruption via a crafted HTML page. Impact described as high severity with potential for total impact; exploit requires user interaction and network access. Google Chrome has release...

CVE-2026-5874

CVE-2026-5874 is a use-after-free in PrivateAI within Google Chrome, affecting Chrome/Chromium before version 147.0.7727.55. The underlying issue could allow a remote attacker who convinces a user to perform specific UI gestures to escape the browser sandbox via a crafted HTML page. Connected adv...

CVE-2026-5897

CVE-2026-5897 affects Google Chrome/Chromium before version 147.0.7727.55, where an incorrect security UI in Downloads could enable UI spoofing via a crafted HTML page if the user performed specific UI gestures. Connected reports show Chromium/Chromium-based Chrome updates across multiple distros...

CVE-2026-5899

CVE-2026-5899 affects Chromium/Google Chrome History Navigation; root cause is insufficient policy enforcement allowing UXSS via crafted HTML and specific UI gestures. Impact: remote attacker could inject scripts/HTML. Remediation: update to patched Chromium/Chrome versions (examples seen in Fedo...

CVE-2026-5907

Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...

CVE-2026-5915

CVE-2026-5915 affects Google Chrome/Chromium WebML: insufficient validation of untrusted input enables an out-of-bounds memory write via a crafted HTML page. Affected products/versions: Chrome/Chromium before 147.0.7727.55. Consequences are described as memory write issues (no explicit exploitati...

CVE-2026-6319

CVE-2026-6319 is a Use-after-Free in Google Chrome's Payments component for Android, prior to version 147.0.7727.101. The issue could allow remote code execution when a user is tricked into performing specific UI gestures and visits a crafted HTML page. Public sources (Debian security advisory DS...

CVE-2026-7361

CVE-2026-7361 affects Google Chrome on iOS. The vulnerability is a use-after-free in the browser when processing crafted HTML pages, potentially allowing a remote attacker to trigger heap corruption and execute arbitrary code. Affected version: Chrome on iOS prior to 147.0.7727.138. Mitigation: u...

CVE-2026-7900

CVE-2026-7900 is a heap buffer overflow in ANGLE used by Google Chrome before 148.0.7778.96, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rated High severity. Affected component: ANGLE within Ch...

CVE-2026-7903

The CVE-2026-7903 entry concerns an integer overflow in ANGLE used by Google Chrome on Mac and Windows before 148.0.7778.96, enabling potential heap corruption via a crafted HTML page. The issue is categorized as High severity (CVSS: 8.8 / HIGH) with network attack vector and user interaction req...

CVE-2026-7907

CVE-2026-7907 is a use-after-free in the DOM exposed by Google Chrome up to version 148.0.7778.96. The vulnerability could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected product: Google Chrome (Desktop/Mobile Chrome 148 series). The C...

CVE-2026-7910

CVE-2026-7910 affects Google Chrome

CVE-2026-7914

CVE-2026-7914 describes a Type Confusion in Chrome on Windows (Accessibility component) that could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. The issue affects Google Chrome before version 148.0.7778.96. The root cause is a type confusion in the Accessibi...

CVE-2026-7927

CVE-2026-7927 is a Chrome sandbox Type Confusion in Runtime vulnerability affecting Google Chrome before version 148.0.7778.96. The issue, described in multiple connected sources, stems from a runtime type-handling confusion that could allow a remote attacker to execute arbitrary code within the ...