Total
7439 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-91727 | 2 Apple, Google | 2 Macos, Chrome | 2026-09-17 | N/A | 8.1 HIGH |
| Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) | |||||
| CVE-2026-91726 | 1 Google | 2 Android, Chrome | 2026-09-17 | N/A | 4.7 MEDIUM |
| Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | |||||
| CVE-2026-91725 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 5.3 MEDIUM |
| Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-91724 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.3 HIGH |
| Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91722 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-91720 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 4.7 MEDIUM |
| Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91733 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.3 HIGH |
| Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91734 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-17 | N/A | 7.4 HIGH |
| Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) | |||||
| CVE-2026-91735 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.3 HIGH |
| Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91736 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91737 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91721 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | |||||
| CVE-2026-91718 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 9.6 CRITICAL |
| Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91717 | 1 Google | 2 Android, Chrome | 2026-09-17 | N/A | 5.1 MEDIUM |
| Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High) | |||||
| CVE-2026-91716 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 9.6 CRITICAL |
| Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91715 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91714 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 5.3 MEDIUM |
| Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-91713 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 4.2 MEDIUM |
| Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-91712 | 2 Apple, Google | 2 Macos, Chrome | 2026-09-17 | N/A | 8.3 HIGH |
| Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-91711 | 1 Google | 1 Chrome | 2026-09-17 | N/A | 8.8 HIGH |
| Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||