Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 17610 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-119272 1 Google 1 Chrome 2026-10-30 N/A 4.3 MEDIUM
Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-76024 1 Google 1 Chrome 2026-10-30 N/A 6.5 MEDIUM
Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-76027 1 Google 1 Chrome 2026-10-30 N/A 4.3 MEDIUM
Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118337 1 Google 1 Chrome 2026-10-30 N/A 9.3 CRITICAL
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118333 1 Google 1 Chrome 2026-10-30 N/A 9.3 CRITICAL
Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113057 1 Google 1 Chrome 2026-10-30 N/A 8.8 HIGH
Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113128 1 Google 1 Chrome 2026-10-30 N/A 8.8 HIGH
Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113030 1 Google 1 Chrome 2026-10-30 N/A 8.8 HIGH
Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-118316 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118318 1 Google 1 Chrome 2026-10-29 N/A 4.3 MEDIUM
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118319 1 Google 1 Chrome 2026-10-29 N/A 4.3 MEDIUM
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118321 1 Google 2 Android, Chrome 2026-10-29 N/A 9.6 CRITICAL
Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118322 1 Google 1 Chrome 2026-10-29 N/A 4.3 MEDIUM
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118332 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118340 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118342 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118355 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118304 1 Google 1 Chrome 2026-10-29 N/A 8.8 HIGH
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118305 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-118306 1 Google 1 Chrome 2026-10-29 N/A 9.6 CRITICAL
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)