CVE-2026-7932

CVE-2026-7932 affects Google Chrome (

CVE-2026-8549

CVE-2026-8549 : Use-after-free in Google Chrome’s Media code path prior to 148.0.7778.168 allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product: Google Chrome (Media component). Root cause: use-after-free. Impact: high (arbitrary c...

CVE-2026-6316

Google Chrome (Forms) has a use-after-free in the Forms component that could allow a remote attacker to execute arbitrary code inside the sandbox. Affected versions are Chrome prior to 147.0.7727.101. The fixed version is provided via the stable channel update (147.0.7727.101 or later). See Chrom...

CVE-2026-7334

CVE-2026-7334 is a report of a Use-After-Free in the Chromium-based Google Chrome browser’s Views component on macOS, leading to potential heap corruption via a crafted HTML page. The issue affects Google Chrome versions before 147.0.7727.138; multiple sources (NVD, Debian, Red Hat, EUVD) describ...

CVE-2026-7349

CVE-2026-7349 is a use-after-free in the Cast component of Google Chrome prior to version 147.0.7727.138 . An attacker on the local network segment could trigger the flaw via malicious network traffic to execute arbitrary code inside the browser sandbox. The vulnerability is listed with high seve...

CVE-2026-7900

CVE-2026-7900 is a heap buffer overflow in ANGLE used by Google Chrome before 148.0.7778.96, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rated High severity. Affected component: ANGLE within Ch...

CVE-2026-7903

The CVE-2026-7903 entry concerns an integer overflow in ANGLE used by Google Chrome on Mac and Windows before 148.0.7778.96, enabling potential heap corruption via a crafted HTML page. The issue is categorized as High severity (CVSS: 8.8 / HIGH) with network attack vector and user interaction req...

CVE-2026-7927

CVE-2026-7927 is a Chrome sandbox Type Confusion in Runtime vulnerability affecting Google Chrome before version 148.0.7778.96. The issue, described in multiple connected sources, stems from a runtime type-handling confusion that could allow a remote attacker to execute arbitrary code within the ...

CVE-2026-7929

Summary: CVE-2026-7929 is a use-after-free in Chrome’s MediaRecording path, fixed in Chrome 148.0.7778.96. Affected component: MediaRecording in Chrome/Chromium. Root cause: use-after-free vulnerability that could be triggered through crafted HTML and user UI gestures. Impact: remote code executi...

CVE-2026-7971

CVE-2026-7971: In Google Chrome, an inappropriate implementation in Opaque Response Blocking (ORB) prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a crafted HTML page. The issue affects Chrome versions older than 148.0.7778.96 (desktop on Windows, macOS, Linux). Miti...

CVE-2026-7981

CVE-2026-7981 affects Google Chrome before 148.0.7778.96. The vulnerability is an out-of-bounds read in Codecs, allowing a remote attacker to read potentially sensitive data from a process’s memory via a malicious file. Impact is described as potentially sensitive information exposure; exploitati...

CVE-2026-7992

CVE-2026-7992 affects Google Chrome on Linux and ChromeOS prior to 148.0.7778.96. The root cause is insufficient validation of untrusted input in the UI, allowing a remote attacker who entices a user to perform specific UI gestures to execute arbitrary code via a crafted HTML page. The CVE is ref...

CVE-2026-8010

CVE-2026-8010 affects Google Chrome’s SiteIsolation feature. The issue is insufficient validation of untrusted input in SiteIsolation, allowing a renderer-compromised attacker to bypass site isolation via a crafted HTML page. Impact is described as Low severity with impact on confidentiality/inte...

CVE-2026-8510

CVE-2026-8510: Integer overflow in Skia within Google Chrome on Windows (before 148.0.7778.168) allows a remote attacker who has compromised the renderer process to trigger an out-of-bounds memory write via a crafted HTML page. Affected component: Skia in Chrome; impact is high (remote code execu...

CVE-2026-8516

CVE-2026-8516 affects Google Chrome (pre-148.0.7778.168) where insufficient validation of untrusted input in DataTransfer could allow a remote attacker to obtain potentially sensitive information from process memory. The attack requires convincing a user to perform specific UI gestures via a craf...

CVE-2026-8518

CVE-2026-8518 is a use-after-free in Blink from Google Chrome prior to version 148.0.7778.168 that allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome (Blink). Root cause: use-after-free in Blink leads to remote ...

CVE-2026-8532

Affected product: Google Chrome (Chromium-based) prior to 148.0.7778.168. Vulnerable component: XML handling/parsing in Chromium. Root cause: integer overflow in XML processing that enables arbitrary code execution inside the sandbox when processing a crafted HTML page. Impact: remote attacker co...

CVE-2026-8538

CVE-2026-8538 describes insufficient validation of untrusted input in the GPU component of Google Chrome, prior to version 148.0.7778.168. A remote attacker who has compromised the renderer process could trigger a denial of service by presenting a crafted HTML page. The description and connected ...

CVE-2026-8542

CVE-2026-8542 : Affects Google Chrome on Windows. The issue is a use-after-free in the browser’s Core, with exploitation requiring a renderer process compromise to potentially escape the sandbox via a crafted HTML page. The available documents do not specify the exact patched version or remediati...

CVE-2026-8544

CVE-2026-8544 affects Google Chrome’s Media component. A use-after-free in Media could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page, with the impact described as High (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected versions are Chr...

CVE-2026-8561

The CVE-2026-8561 entry concerns Google Chrome (Chromium-based) and its Fullscreen UI: an incorrect security UI in Fullscreen allowed a remote attacker to spoof UI via a crafted HTML page. Transcripted details across sources confirm the vulnerable component is the fullscreen security UI, with the...

CVE-2026-8575

CVE-2026-8575 : In Google Chrome (Chromium UI) before 148.0.7778.168, a use-after-free in the UI could be triggered by a crafted HTML page after an attacker compromised the renderer process, potentially enabling a sandbox escape. The reported impact is a high-severity outcome (per CVSS) with cros...

CVE-2026-8577

CVE-2026-8577 affects Google Chrome before 148.0.7778.168, where an integer overflow in the Fonts component could allow a remote attacker to execute arbitrary code in the sandbox via a crafted HTML page. This is a browser-level vulnerability in Chrome/Chromium’s font handling. According to the pr...

CVE-2026-9119

CVE-2026-9119 describes a heap buffer overflow in WebRTC within Google Chrome prior to 148.0.7778.179, leading to potential remote code execution in the browser sandbox via a crafted HTML page. Affected component is Chrome's WebRTC stack; root cause is a heap buffer overflow. Impact stated: remot...

CVE-2026-9122

CVE-2026-9122 : Out-of-bounds read in the GPU component of Google Chrome on macOS, before version 148.0.7778.179. A remote attacker could read potentially sensitive data from process memory via a crafted HTML page. Existence of fixed version is implied by the version boundary; update to the patch...

CVE-2026-9900

CVE-2026-9900 is an out-of-bounds write in ANGLE found in Google Chrome prior to 148.0.7778.216, potentially enabling a sandbox escape when a renderer process is compromised via a crafted HTML page. The issue affects ANGLE within Chromium/Chrome and is discussed in multiple sources (NVD, ENISA EU...

CVE-2026-9908

CVE-2026-9908 affects the ANGLE component in Google Chrome/Chromium prior to 148.0.7778.216. The vulnerability is an out-of-bounds read that could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Impact is described as high for d...

CVE-2026-9964

Use-after-free in Bluetooth within Google Chrome for Mac before 148.0.7778.216. An attacker can coerce a user to install a malicious extension, enabling arbitrary code execution via a crafted Chrome Extension. Affected software: Google Chrome on macOS; root cause: use-after-free in the Bluetooth ...

CVE-2025-11209

CVE-2025-11209 concerns an insecure implementation in the Android Omnibox of Google Chrome that allowed spoofing the URL bar via a crafted HTML page. Connected documents confirm the issue relates to Chromium-based Chrome/Chromium, with remediation via upgrading to version 141.0.7390.54 or newer (...

CVE-2026-10907

CVE-2026-10907 is an out-of-bounds write in ANGLE used by Google Chrome, affecting Chrome versions prior to 149.0.7827.53. The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. The connected documents confirm ANGLE as the vulnerable component and Chrome ...

CVE-2026-11094

CVE-2026-11094 affects Google Chrome on Windows, due to a use-after-free in Codecs that could allow a remote attacker, who has compromised the renderer process, to escape the sandbox via a crafted HTML page. The vulnerability is triggered in Chrome versions prior to 149.0.7827.53. Impact is high ...

CVE-2026-11113

CVE-2026-11113 affects Google Chrome (Chromium-based) ANGLE: insufficient validation of untrusted input may allow a remote attacker, who already compromised the renderer process, to escape the sandbox via a crafted HTML page. The issue is categorized as CRITICAL by multiple sources; attack vector...

CVE-2026-11202

Summary: CVE-2026-11202 concerns Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53, where an inappropriate implementation allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is tied to Chromium-based behavior on iOS, with a mediu...

CVE-2026-13778

CVE-2026-13778 is a use-after-free vulnerability in WebUSB in Google Chrome on macOS, allowing a local attacker to execute arbitrary code via a malicious peripheral. Affected product: Google Chrome (Mac) prior to version 150.0.7871.47. The issue stems from a WebUSB use-after-free condition; explo...

CVE-2026-13800

CVE-2026-13800 : In Google Chrome, an inappropriate implementation in the Windows Updater allows a local attacker to escalate privileges via a malicious file. Affected product is Google Chrome Updater on Windows prior to version 150.0.7871.47. Root cause as described is an Updater implementation ...

CVE-2026-13806

CVE-2026-13806 affects Google Chrome on desktop. The vulnerability arises from insufficient validation of untrusted input in Accessibility, allowing a renderer process compromise to bypass site isolation via a crafted HTML page. Affected versions are prior to 150.0.7871.47. The Chrome stable chan...

CVE-2026-13807

CVE-2026-13807 describes a use-after-free in Import for Google Chrome on iOS, exploited by convincing a user to perform specific UI gestures to run arbitrary code via a malicious file. Affected product: Google Chrome for iOS (before 150.0.7871.47). Root cause: use-after-free in the Import path. I...

CVE-2026-13815

CVE-2026-13815 affects Blink in Google Chrome, with a use-after-free vulnerability present in versions prior to 150.0.7871.47. The issue allows remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTML page. Severity is High. Affected component is Blink; root cause ...

CVE-2026-13816

CVE-2026-13816 affects Google Chrome on Android prior to 150.0.7871.47, due to insufficient validation of untrusted input in the File Input component. This vulnerability can allow a remote attacker to leak cross-origin data via a crafted HTML page. The connected documents confirm the same descrip...

CVE-2026-13823

CVE-2026-13823 : Use-after-free in Glic within Google Chrome (prior to 150.0.7871.47) could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. The issue is in Chrome/Chromium-based rendering; impact reported as High. Affected product/version: Google Chrome...

CVE-2026-13834

The CVE-2026-13834 entry documents an issue in ANGLE used by Google Chrome before version 150.0.7871.47, where insufficient validation of untrusted input allowed a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE compo...

CVE-2026-13839

CVE-2026-13839 corresponds to an issue in Google Chrome (CSS handling) where an inappropriate CSS implementation allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected software: Google Chrome prior to version 150.0.7871.47. Root cause: CSS/HTML rendering path...

CVE-2026-13846

CVE-2026-13846 affects Google Chrome on macOS, caused by a use-after-free in USB handling that could allow a sandbox escape when a renderer process is compromised and a crafted HTML page is loaded. Impact described as high/highest severity; no exploitation details are provided in the source docum...

CVE-2026-13851

The provided CVE-2026-13851 entry concerns Google Chrome on Android, where WebAppInstalls suffers from insufficient validation of untrusted input. A crafted HTML page can bypass discretionary access control due to this flaw, with the issue affecting Chrome versions prior to 150.0.7871.47. The con...

CVE-2026-13881

CVE-2026-13881 details (concrete): In Google Chrome (Chromium WebAppInstalls) before version 150.0.7871.47, an inappropriate implementation allows a remote attacker to bypass the same-origin policy via a crafted HTML page. This is a network-exploitable issue with user interaction required and pot...

CVE-2026-13883

CVE-2026-13883 describes a Type Confusion in ANGLE used by Google Chrome prior to 150.0.7871.47 that can potentially allow a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability impact is described as high/critical (CVSS v3.1 base score 9.6) with network attack v...

CVE-2026-13889

Consolidated analysis for CVE-2026-13889: A side-channel information leakage in WebAuthentication on Google Chrome for iOS (Chromium-based) affects the WebAuthentication component. The vulnerability allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product/a...

CVE-2026-13910

Summary: CVE-2026-13910 affects Google Chrome on Android, where WebXR policy enforcement is insufficient. The vulnerability could allow a remote attacker to leak cross-origin data through a crafted HTML page. The issue is tied to Chrome/Android WebXR, with the described impact as per multiple sou...

CVE-2026-13921

The set of connected records confirms CVE-2026-13921 affects Google Chrome (Chromium-based) via the DeviceBoundSessionCredentials component where insufficient validation of untrusted input enables a remote bypass of the same-origin policy through a crafted HTML page. The vulnerability is describe...

CVE-2026-13925

CVE-2026-13925 concerns an inappropriate implementation in Chrome’s Downloads on Windows, prior to version 150.0.7871.47. The vulnerability enables remote code execution when a user is convinced to perform specific UI gestures on a crafted HTML page. Affected software is Google Chrome (Windows); ...