All CVEs — page 404 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• HIGH 8.1CVE-2026-95301public exploit available2026-09-29

  A missing authorization flaw in Google Chrome extensions allowed remote attackers to bypass site isolation by compromising the renderer process with a crafted HTML page.

• MEDIUM 4.8CVE-2026-95300public exploit available2026-09-29
• CRITICAL 9.6CVE-2026-952992026-09-29

  This flaw involves a use-after-free vulnerability in the GPU component of Google Chrome prior to version 154.0.8037.57, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.

• HIGH 7.8CVE-2026-95298public exploit available2026-09-29

  A use-after-free vulnerability in Google Chrome prior to 154.0.8037.57 allows local attackers to potentially execute arbitrary code outside the sandbox via UI interaction, posing a significant security risk.

• MEDIUM 6.5CVE-2026-952972026-09-29
• MEDIUM 4.3CVE-2026-952962026-09-29
• MEDIUM 4.6CVE-2026-95295public exploit available2026-09-29
• MEDIUM 5.4CVE-2026-952942026-09-29
• MEDIUM 4.7CVE-2026-952932026-09-29
• MEDIUM 4.8CVE-2026-952922026-09-29
• MEDIUM 5.4CVE-2026-952912026-09-29
• MEDIUM 5.4CVE-2026-95290public exploit available2026-09-29
• MEDIUM 4.3CVE-2026-95289public exploit available2026-09-29
• MEDIUM 5.4CVE-2026-952882026-09-29
• MEDIUM 5.4CVE-2026-95287public exploit available2026-09-29
• HIGH 8.8CVE-2026-952862026-09-29

  A type confusion vulnerability in Google Chrome prior to 154.0.8037.57 allows remote attackers to execute arbitrary code within the sandbox via a specially crafted HTML page.

• HIGH 8.4CVE-2026-952852026-09-29

  The flaw allows a remote attacker to bypass web origin policy by compromising the renderer process in Google Chrome on Android, leading to potential high impact on user data and system integrity.

• CRITICAL 9.6CVE-2026-952842026-09-29

  A buffer overflow vulnerability in ANGLE in Google Chrome on Android prior to 154.0.8037.57 allows remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.

• CRITICAL 9.6CVE-2026-952832026-09-29

  A buffer overflow vulnerability in Tint within Google Chrome on Android prior to 154.0.8037.57 allows remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.

• HIGH 8.8CVE-2026-95282public exploit available2026-09-29

  A use-after-free vulnerability in Google Chrome prior to 154.0.8037.57 could allow a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page.

• CRITICAL 9.6CVE-2026-952812026-09-29

  A buffer overflow vulnerability in ANGLE in Google Chrome on Android prior to 154.0.8037.57 allows remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.

• HIGH 7.5CVE-2026-952802026-09-29

  A race condition in Chrome's V8 JavaScript engine allows remote attackers to execute arbitrary code within the sandbox by crafting a malicious HTML page, potentially leading to full system compromise.

• MEDIUM 5.4CVE-2026-952792026-09-29
• HIGH 8.4CVE-2026-952782026-09-29

  The flaw allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page, potentially leading to unauthorized access or execution of code.

• CRITICAL 9.6CVE-2026-952772026-09-29

  This flaw involves a use-after-free vulnerability in Google Chrome's Views component, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.