CVE-2026-5886

Summary of CVE-2026-5886 (WebAudio, Chrome/Chromium) : Affected software is Google Chrome (Mac) and Chromium with out-of-bounds read in WebAudio that could allow a remote attacker to read potentially sensitive data from process memory via a crafted HTML page. The issue is recorded against Chrome/...

CVE-2026-5913

CVE-2026-5913 concerns Blink in Google Chrome/Chromium, where an out-of-bounds memory read could be triggered by a crafted HTML page. The issue is described across multiple sources as an out-of-bounds read in Blink with a Chromium/Chrome context. Public fixes exist: Debian reports the security up...

CVE-2026-5883

CVE-2026-5883: Use-after-free in Media within Google Chrome prior to 147.0.7727.55 allows remote code execution inside the sandbox via a crafted HTML page. Affected product is Google Chrome (Chromium-based); root cause is use-after-free in Media handling. The Chrome 147 release notes list this fi...

CVE-2026-7924

CVE-2026-7924 describes an uninitialized use in Dawn within Google Chrome before 148.0.7778.96. According to multiple connected documents, a crafted HTML page could allow a remote attacker to obtain potentially sensitive information from a process’s memory. Affected component is Dawn, embedded in...

CVE-2026-7950

CVE-2026-7950 describes an out-of-bounds read and write in Chrome’s GFX component. Affected software is Google Chrome prior to version 148.0.7778.96, where an attacker could trigger arbitrary read/write by sending malicious network traffic. The vulnerability is categorized as Chromium/Chrome-rela...

CVE-2026-8003

The CVE-2026-8003 entry is attached to multiple sources (OSV, Debian, NVD, EUVD, etc.) describing the same issue in Google Chrome: Insufficient validation of untrusted input in TabGroups allows a remote attacker to perform UI spoofing via malicious network traffic. Root cause: untrusted input val...

CVE-2026-8517

The CVE-2026-8517 entry describes an object lifecycle issue in Chrome’s WebShare on macOS prior to version 148.0.7778.168. The vulnerability allows a remote attacker to execute arbitrary code when a user is persuaded to perform specific UI gestures on a crafted HTML page. This is tied to the Chro...

CVE-2026-8520

CVE-2026-8520 : A race in the Payments component of Google Chrome before version 148.0.7778.168 could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is described as critical in Chromium, with a network attack vector and high impact on confiden...

CVE-2026-8522

CVE-2026-8522 affects Google Chrome on macOS, with a use-after-free in the Downloads component allowing remote code execution via a crafted HTML page. Vulnerable when running versions prior to 148.0.7778.168; impact is arbitrary code execution with high/critical severity per Chromium, with networ...

CVE-2026-8532

Affected product: Google Chrome (Chromium-based) prior to 148.0.7778.168. Vulnerable component: XML handling/parsing in Chromium. Root cause: integer overflow in XML processing that enables arbitrary code execution inside the sandbox when processing a crafted HTML page. Impact: remote attacker co...

CVE-2026-8533

CVE-2026-8533 affects Google Chrome (Chromium-based) up to version 148.0.7778.168. The issue is a use-after-free in Accessibility in the renderer process, allowing a remote attacker with renderer access to potentially escape the Chrome sandbox via a crafted HTML page. The root cause is a use-afte...

CVE-2026-8557

This CVE concerns Google Chrome: a use-after-free in the Accessibility component prior to version 148.0.7778.168. A remote attacker who already compromised the renderer could escalate privileges via a crafted HTML page. Impact is Privilege Escalation with High severity per the cited metrics. The ...

CVE-2026-9933

CVE-2026-9933 affects Google Chrome (Input component) with a use-after-free in the Chromium UI input handling, potentially enabling heap corruption when a user is convinced to perform specific UI gestures via a crafted HTML page. The vulnerability is described as remote and high severity, with af...

CVE-2025-12444

The CVE-2025-12444 entry concerns Google Chrome/Chromium’s Fullscreen UI: an incorrect security UI allows UI spoofing via a crafted HTML page when a user engages specific UI gestures. Affected version window is Chrome/Chromium prior to 142.0.7444.59; remediation is to update to 142.0.7444.59 or n...

CVE-2025-12726

CVE-2025-12726 affects Google Chrome/Chromium on Windows with an incorrect Views implementation that allows privilege escalation via a crafted HTML page when the renderer is compromised. Affected versions are Chrome on Windows prior to 142.0.7444.137 (Chromium base). Remediation is to update to C...

CVE-2026-10932

Use-after-free in the Chrome Android UI (pre-149.0.7827.53) allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected: Google Chrome for Android; root cause: UI use-after-free. Impact: high (confidentiality, integrity, availability). Remediation: update to ...

CVE-2026-10979

CVE-2026-10979 describes an out-of-bounds read in ANGLE used by Google Chrome before 149.0.7827.53. The issue enables a remote attacker to potentially read sensitive data from a process’s memory via a crafted HTML page. The CVE is linked to Chromium components and Chrome update advisories (stable...

CVE-2026-11023

The CVE-2026-11023 issue affects Google Chrome prior to 149.0.7827.53 and is caused by an inappropriate implementation in the WebAppInstalls component. The vulnerability could allow a remote attacker who has compromised the renderer process to bypass the same-origin policy via a crafted HTML page...

CVE-2026-11055

CVE-2026-11055 concerns Google Chrome on Windows, where a use-after-free in ANGLE can be triggered by a crafted HTML page. The vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. Affected versions are Chrome prior to 149.0.7827.53 . There is no explicit ex...

CVE-2026-11184

CVE-2026-11184 affects Google Chrome (Chromium-backed) prior to 149.0.7827.53, where insufficient policy enforcement in the Actor component could allow a remote attacker to bypass navigation restrictions through a crafted HTML page. The vulnerability is rated Medium, with network attack vector, n...

CVE-2026-11194

CVE-2026-11194 concerns Google Chrome’s network stack: an inappropriate implementation enables a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome prior to 149.0.7827.53. The vulnerability stems from the Network component/root cause described in the co...

CVE-2026-13800

CVE-2026-13800 : In Google Chrome, an inappropriate implementation in the Windows Updater allows a local attacker to escalate privileges via a malicious file. Affected product is Google Chrome Updater on Windows prior to version 150.0.7871.47. Root cause as described is an Updater implementation ...

CVE-2026-13824

CVE-2026-13824 concerns Google Chrome extensions policy enforcement. The issue is described as insufficient policy enforcement in Chrome’s Extensions, allowing a remote attacker who has compromised the renderer process to escalate privileges via a crafted HTML page. The public notes specify the v...

CVE-2026-13868

Technical details (affected components, root cause, fixes) are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2026-13877

CVE-2026-13877 involves insufficient validation of untrusted input in ANGLE used by Google Chrome before version 150.0.7871.47. The issue allows a remote attacker who has already compromised the renderer process to potentially read sensitive data from process memory through a crafted HTML page. T...

CVE-2026-13879

CVE-2026-13879 : Use-after-free in Bluetooth handling in Google Chrome (Chromium) prior to 150.0.7871.47. The issue allows an attacker on the local network segment to potentially read sensitive data from a process’s memory via a malicious Bluetooth peripheral. Affected component is Bluetooth code...

CVE-2026-13932

The set of connected documents confirms CVE-2026-13932 affects Google Chrome on Android, due to an inappropriate implementation in Sharing that allowed a remote attacker with renderer access to leak cross-origin data via a crafted HTML page. Affected version range is prior to 150.0.7871.47; the i...

CVE-2026-13960

Summary: CVE-2026-13960 describes an inappropriate implementation in Google Chrome’s Passwords feature prior to version 150.0.7871.47 that allows a remote attacker to perform UI spoofing through a crafted HTML page. The issue is tracked with a Medium severity (CVSS v3.1: 4.3) and involves network...

CVE-2026-13985

The CVE-2026-13985 issue affects Google Chrome (Chromium-based) where an inappropriate implementation in MediaCapture allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Impact is UI spoofing with no confidentiality or availability lo...

CVE-2026-14065

CVE-2026-14065 affects Google Chrome prior to 150.0.7871.47. The issue is insufficient validation of untrusted input in PageInfo, which could allow a remote attacker who already compromised the renderer process to bypass navigation restrictions via a crafted HTML page. The common description acro...

CVE-2026-14074

Google Chrome on iOS prior to 150.0.7871.47 is affected by a side-channel information leakage in WebAuthentication that can leak cross-origin data via a crafted HTML page. The issue affects Chrome’s WebAuthentication component; the public references place a Low severity (CVSS 3.1: 6.5, MEDIUM) an...

CVE-2026-14103

According to the connected documents, CVE-2026-14103 is a use-after-free bug in SSL handling on Google Chrome running on ChromeOS, prior to version 150.0.7871.47. The vulnerability could allow a remote attacker to obtain potentially sensitive data from process memory via a crafted HTML page. The ...

CVE-2026-17659

CVE-2026-17659 affects Google Chrome: an inappropriate implementation in Site Isolation prior to Chrome 151.0.7922.72 allowed a renderer-compromising remote attacker to bypass site isolation via a crafted HTML page. The Chrome stable update notes (Chromium/Chrome Security fixes) confirm the issue...

CVE-2026-17888

CVE-2026-17888 affects Google Chrome WebUI due to insufficient validation of untrusted input, enabling a remote attacker to potentially perform a sandbox escape via malicious network traffic. The issue is described for Chrome versions before 151.0.7922.72 (Chromium family) with a Medium sever ity...

CVE-2026-17969

CVE-2026-17969 describes an inappropriate implementation in Passwords in Google Chrome before 151.0.7922.72 that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability affects Google Chrome (Chromium-based) and is associated with a high impa...

CVE-2026-3913

CVE-2026-3913 is a heap buffer overflow in WebML of Google Chrome, fixed in Chrome 146.0.7680.71 (and associated packaging for Debian). The vulnerability allows remote heap corruption via a crafted HTML page. Affected component: WebML in Chromium/Chrome. Root cause: heap buffer overflow. Impact: ...

CVE-2026-5876

CVE-2026-5876 involves a side-channel information leakage in Navigation in Google Chrome and Chromium prior to 147.0.7727.55. A remote attacker could leak cross-origin data via a crafted HTML page. Affected software: Google Chrome (desktop) and Chromium; root cause: side-channel leakage during na...

CVE-2026-5895

CVE-2026-5895 describes an incorrect security UI in the Omnibox of Google Chrome on iOS before 147.0.7727.55, allowing a remote attacker to spoof the Omnibox (URL bar) via a crafted domain name. The CVE is listed with Chromium security severity: Low. Public connected sources confirm that Chrome/C...

CVE-2026-7900

CVE-2026-7900 is a heap buffer overflow in ANGLE used by Google Chrome before 148.0.7778.96, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rated High severity. Affected component: ANGLE within Ch...

CVE-2026-7902

CVE-2026-7902 is an out-of-bounds memory access in V8 affecting Google Chrome prior to 148.0.7778.96, enabling remote code execution via a crafted HTML page. Affected component: V8 within Chrome; root cause described as an out-of-bounds memory access. Impact is high (remote code execution in sand...

CVE-2026-7994

CVE-2026-7994 : In Chromoting on Windows in Google Chrome, before version 148.0.7778.96, there is an insecure/incorrect implementation that could allow a local attacker to achieve OS-level privilege escalation by processing a malicious file. Multiple connected sources corroborate this, including ...

CVE-2026-9925

CVE-2026-9925 is a use-after-free in ANGLE within Google Chrome (Chromium) before 148.0.7778.216. A remote attacker who has compromised the renderer process could potentially escape the sandbox via a crafted HTML page. Affected component: ANGLE/Chromium graphics translation layer; vulnerable code...

CVE-2026-9948

The CVE-2026-9948 entry concerns a use-after-free in the Views component of Google Chrome on macOS, reported as pre-148.0.7778.216. The underlying issue is a use-after-free in the renderer process’s Views handling that could allow a remote attacker who crafts a page to escape the Chrome sandbox. ...

CVE-2025-11216

CVE-2025-11216: In Google Chrome on Mac, prior to Chromium 141.0.7390.54, an inappropriate Storage implementation allows a remote attacker to spoof domains via a crafted video file. Affected: Chrome/Chromium (Mac). Root cause: Storage handling flaw as described in the CVE. Impact: domain spoofing...

CVE-2025-12443

CVE-2025-12443 corresponds to an out-of-bounds read in WebXR in Google Chrome/Chromium. The issue allows a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Affected component: WebXR in Chromium-based Chrome; root cause: out-of-bounds read in WebXR implementation. I...

CVE-2025-13638

CVE-2025-13638 is a use-after-free in Chrome’s Media Stream leading to heap corruption when processing a crafted HTML page. Affects Google Chrome/Chromium components prior to version 143.0.7499.41. Remediation is to upgrade to 143.0.7499.41 or newer (per Chrome/ChromeOS and Debian advisories). Ex...

CVE-2026-11008

CVE-2026-11008 affects Google Chrome/Chromium WebAppInstalls, with root cause Insufficient validation of untrusted input in WebAppInstalls. The vulnerability enables a remote attacker, who already compromised the renderer, to leak cross-origin data via a crafted HTML page. Affected product is Chr...

CVE-2026-11054

The CVE-2026-11054 entry covers a Use-After-Free in WebRTC for Google Chrome, prior to version 149.0.7827.53. The vulnerability could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page, with impact on confidentiality, integrity, and availability (hig...

CVE-2026-11107

Affected software: Google Chrome (Chromium-based) prior to version 149.0.7827.53. Issue: In the Downloads component, an inappropriate implementation allows a remote attacker to spoof UI via a crafted HTML page. Impact: UI spoofing; no other data confidentially affected per provided documents. Roo...

CVE-2026-11632

CVE-2026-11632 describes a use-after-free in the TabStrip component of Google Chrome, exploited when a user performs specific UI gestures that lead to code execution via a crafted HTML page. The vulnerability affects Chrome versions prior to 149.0.7827.103 and is described as a remote code execut...