CVE-2026-91708

A race condition in the Network component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had already compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium rates the severity as High . The bug was reported by Google on 2026-08-26 and ...

CVE-2026-91717

CVE-2026-91717 is a missing authorization vulnerability in Google Chrome on Android (prior to version 153.0.8010.47 ). A local attacker, through a co-installed application, can obtain sensitive information , potentially leading to unauthorized access to user data. The bug was reported by jodyrito...

CVE-2026-91735

Google Chrome prior to 153.0.8010.47 contains an incorrect authorization flaw in its WebUI component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. The vulnerability was assigned a CVSS...

CVE-2026-91736

CVE-2026-91736 is a use-after-free vulnerability in the DOM component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-08-26 and carries...

CVE-2026-91741

CVE-2026-91741 is a type confusion vulnerability in the CacheStorage component of Google Chrome , affecting versions prior to 153.0.8010.47 (Windows/Mac: .47/.48, Linux: .47). A remote attacker can exploit this by delivering a crafted HTML page, leading to arbitrary code execution inside the rend...

CVE-2026-91709

CVE-2026-91709 is a type confusion vulnerability in the ServiceWorker component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Jihyeon Jeong (Compsec Lab, Se...

CVE-2026-91733

CVE-2026-91733 is an improper state validation flaw in Skia , the 2D graphics library used in Google Chrome prior to 153.0.8010.47 . An attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the sandbox , resulting in information disclosu...

CVE-2026-91747

A use-after-free vulnerability in Skia , the 2D graphics library used by Google Chrome , affects versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.48 (Windows/Mac). The flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by serving...

CVE-2026-91731

CVE-2026-91731 is a type confusion vulnerability in the Compositing component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page, leading to arbitrary code execution inside the browser's sandbox . The CVS...

CVE-2026-91720

CVE-2026-91720 is an uninitialized resource flaw in the ANGLE component of Google Chrome , present in versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.47 (Linux). A remote attacker can leverage a crafted HTML page to read memory outside the sandbox , rated High by Chromium. The CVSS v...

CVE-2026-91748

CVE-2026-91748 is a race condition in the Extensions component of Google Chrome on Mac prior to 153.0.8010.47 . A remote attacker who had already compromised the renderer process could leverage social engineering to execute arbitrary code outside the sandbox via UI Interaction, rated CVSS 3.1: 8....

CVE-2026-91743

A race condition in the Core component of Google Chrome prior to 153.0.8010.47 allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the browser's sandbox by tricking a user into visiting a crafted HTML page. The bug was internally reported by...

CVE-2026-91744

CVE-2026-91744 is a race condition in the PlatformIntegration component of Google Chrome on Mac , affecting versions prior to 153.0.8010.47 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information by delivering a crafte...

CVE-2026-91712

A race condition in the Extensions component of Google Chrome (Mac) prior to 153.0.8010.47 allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the browser sandbox via a crafted HTML page. The vulnerability was reported by Google ...

CVE-2026-91727

CVE-2026-91727 is an incorrect reference resolution flaw in the Extensions component of Google Chrome on Mac , affecting versions prior to 153.0.8010.47 . A local attacker who has already compromised the renderer process can exploit this to execute arbitrary code outside the sandbox via a local p...

CVE-2026-91724

A use-after-free vulnerability in the Input component of Google Chrome prior to 153.0.8010.47 allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The flaw carries a CVSS 8.3 (HIGH) score and a...

CVE-2026-91734

CVE-2026-91734 is an incorrect authorization flaw in Core of Google Chrome on Windows prior to version 153.0.8010.47 . A local attacker can leverage a local program to execute arbitrary code outside the browser sandbox , potentially leading to complete compromise of the affected system (CVSS 3.1:...

CVE-2026-91728

CVE-2026-91728 is an integer overflow in V8 , the JavaScript engine used by Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit this flaw by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox . The bug was reporte...

CVE-2026-91749

CVE-2026-91749 is a use-after-free in the Workers component of Google Chrome , rated Critical by Chromium with a CVSS 3.1 score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). A remote attacker could potentially execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML...

CVE-2026-91721

CVE-2026-91721 is a use after free vulnerability in the Internals component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit it via a crafted HTML page to potentially execute arbitrary code outside the sandbox . The Chromium team rates it Critical ; CVS...