CVE Daily – Google Chrome (High+Critical) https://cvedaily.com/pages/tags/chrome.html CVE Daily – Google Chrome (High+Critical) en Wed, 03 Jun 2026 21:26:27 +0000 [High] CVE-2026-45727 – CloakBrowser is a tool to bypass bot detection tests. Prior to version 0.3.28, t... https://nvd.nist.gov/vuln/detail/CVE-2026-45727 https://nvd.nist.gov/vuln/detail/CVE-2026-45727 Mon, 01 Jun 2026 19:16:53 +0000 High CVE-2026-45727

CloakBrowser is a tool to bypass bot detection tests. Prior to version 0.3.28, the cloakserve CDP multiplexer uses the user-supplied fingerprint query parameter directly as a filesystem path component when creating Chrome profile directories. An unauthenticated attacker who can reach the cloakserve port can supply a crafted fingerprint value containing path traversal sequences to resolve user_dat…

CVSS: 8.8 · CWE: CWE-22

View on NVD

]]> [High] CVE-2026-9999 – Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.777... https://nvd.nist.gov/vuln/detail/CVE-2026-9999 https://nvd.nist.gov/vuln/detail/CVE-2026-9999 Thu, 28 May 2026 23:16:58 +0000 High CVE-2026-9999

Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-9998 – Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo... https://nvd.nist.gov/vuln/detail/CVE-2026-9998 https://nvd.nist.gov/vuln/detail/CVE-2026-9998 Thu, 28 May 2026 23:16:58 +0000 High CVE-2026-9998

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-472

View on NVD

]]> [High] CVE-2026-9997 – Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9997 https://nvd.nist.gov/vuln/detail/CVE-2026-9997 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9997

Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9995 – Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9995 https://nvd.nist.gov/vuln/detail/CVE-2026-9995 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9995

Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9994 – Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allow... https://nvd.nist.gov/vuln/detail/CVE-2026-9994 https://nvd.nist.gov/vuln/detail/CVE-2026-9994 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9994

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9993 – Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9993 https://nvd.nist.gov/vuln/detail/CVE-2026-9993 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9993

Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9992 – Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a rem... https://nvd.nist.gov/vuln/detail/CVE-2026-9992 https://nvd.nist.gov/vuln/detail/CVE-2026-9992 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9992

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9990 – Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216... https://nvd.nist.gov/vuln/detail/CVE-2026-9990 https://nvd.nist.gov/vuln/detail/CVE-2026-9990 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9990

Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9988 – Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allow... https://nvd.nist.gov/vuln/detail/CVE-2026-9988 https://nvd.nist.gov/vuln/detail/CVE-2026-9988 Thu, 28 May 2026 23:16:57 +0000 High CVE-2026-9988

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9987 – Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on... https://nvd.nist.gov/vuln/detail/CVE-2026-9987 https://nvd.nist.gov/vuln/detail/CVE-2026-9987 Thu, 28 May 2026 23:16:56 +0000 High CVE-2026-9987

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9984 – Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed... https://nvd.nist.gov/vuln/detail/CVE-2026-9984 https://nvd.nist.gov/vuln/detail/CVE-2026-9984 Thu, 28 May 2026 23:16:56 +0000 High CVE-2026-9984

Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9983 – Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9983 https://nvd.nist.gov/vuln/detail/CVE-2026-9983 Thu, 28 May 2026 23:16:56 +0000 High CVE-2026-9983

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-843

View on NVD

]]> [High] CVE-2026-9982 – Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14... https://nvd.nist.gov/vuln/detail/CVE-2026-9982 https://nvd.nist.gov/vuln/detail/CVE-2026-9982 Thu, 28 May 2026 23:16:56 +0000 High CVE-2026-9982

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9978 – Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9978 https://nvd.nist.gov/vuln/detail/CVE-2026-9978 Thu, 28 May 2026 23:16:56 +0000 High CVE-2026-9978

Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9977 – Insufficient validation of untrusted input in WebShare in Google Chrome on Andro... https://nvd.nist.gov/vuln/detail/CVE-2026-9977 https://nvd.nist.gov/vuln/detail/CVE-2026-9977 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9977

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9976 – Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 all... https://nvd.nist.gov/vuln/detail/CVE-2026-9976 https://nvd.nist.gov/vuln/detail/CVE-2026-9976 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9976

Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2026-9975 – Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 a... https://nvd.nist.gov/vuln/detail/CVE-2026-9975 https://nvd.nist.gov/vuln/detail/CVE-2026-9975 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9975

Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-9974 – Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9974 https://nvd.nist.gov/vuln/detail/CVE-2026-9974 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9974

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9973 – Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a rem... https://nvd.nist.gov/vuln/detail/CVE-2026-9973 https://nvd.nist.gov/vuln/detail/CVE-2026-9973 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9973

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9972 – Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 all... https://nvd.nist.gov/vuln/detail/CVE-2026-9972 https://nvd.nist.gov/vuln/detail/CVE-2026-9972 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9972

Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-457

View on NVD

]]> [High] CVE-2026-9970 – Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9970 https://nvd.nist.gov/vuln/detail/CVE-2026-9970 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9970

Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9969 – Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14... https://nvd.nist.gov/vuln/detail/CVE-2026-9969 https://nvd.nist.gov/vuln/detail/CVE-2026-9969 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9969

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9968 – Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9968 https://nvd.nist.gov/vuln/detail/CVE-2026-9968 Thu, 28 May 2026 23:16:55 +0000 High CVE-2026-9968

Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-472

View on NVD

]]> [Critical] CVE-2026-9967 – Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9967 https://nvd.nist.gov/vuln/detail/CVE-2026-9967 Thu, 28 May 2026 23:16:54 +0000 Critical CVE-2026-9967

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 9.6 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9966 – Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9966 https://nvd.nist.gov/vuln/detail/CVE-2026-9966 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9966

Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-472

View on NVD

]]> [High] CVE-2026-9965 – Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9965 https://nvd.nist.gov/vuln/detail/CVE-2026-9965 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9965

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9964 – Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9964 https://nvd.nist.gov/vuln/detail/CVE-2026-9964 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9964

Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

CVSS: 8.1 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9963 – Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed... https://nvd.nist.gov/vuln/detail/CVE-2026-9963 https://nvd.nist.gov/vuln/detail/CVE-2026-9963 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9963

Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-457

View on NVD

]]> [High] CVE-2026-9962 – Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remo... https://nvd.nist.gov/vuln/detail/CVE-2026-9962 https://nvd.nist.gov/vuln/detail/CVE-2026-9962 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9962

Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9961 – Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowe... https://nvd.nist.gov/vuln/detail/CVE-2026-9961 https://nvd.nist.gov/vuln/detail/CVE-2026-9961 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9961

Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9960 – Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9960 https://nvd.nist.gov/vuln/detail/CVE-2026-9960 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9960

Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted font file. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-472

View on NVD

]]> [High] CVE-2026-9958 – Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remo... https://nvd.nist.gov/vuln/detail/CVE-2026-9958 https://nvd.nist.gov/vuln/detail/CVE-2026-9958 Thu, 28 May 2026 23:16:54 +0000 High CVE-2026-9958

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9957 – Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote ... https://nvd.nist.gov/vuln/detail/CVE-2026-9957 https://nvd.nist.gov/vuln/detail/CVE-2026-9957 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9957

Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9956 – Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9956 https://nvd.nist.gov/vuln/detail/CVE-2026-9956 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9956

Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9954 – Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9954 https://nvd.nist.gov/vuln/detail/CVE-2026-9954 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9954

Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9952 – Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9952 https://nvd.nist.gov/vuln/detail/CVE-2026-9952 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9952

Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9951 – Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remote a... https://nvd.nist.gov/vuln/detail/CVE-2026-9951 https://nvd.nist.gov/vuln/detail/CVE-2026-9951 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9951

Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9949 – Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allow... https://nvd.nist.gov/vuln/detail/CVE-2026-9949 https://nvd.nist.gov/vuln/detail/CVE-2026-9949 Thu, 28 May 2026 23:16:53 +0000 High CVE-2026-9949

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9948 – Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allowed ... https://nvd.nist.gov/vuln/detail/CVE-2026-9948 https://nvd.nist.gov/vuln/detail/CVE-2026-9948 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9948

Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9947 – Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote ... https://nvd.nist.gov/vuln/detail/CVE-2026-9947 https://nvd.nist.gov/vuln/detail/CVE-2026-9947 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9947

Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9946 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9946 https://nvd.nist.gov/vuln/detail/CVE-2026-9946 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9946

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9945 – Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9945 https://nvd.nist.gov/vuln/detail/CVE-2026-9945 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9945

Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9941 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9941 https://nvd.nist.gov/vuln/detail/CVE-2026-9941 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9940 – Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a... https://nvd.nist.gov/vuln/detail/CVE-2026-9940 https://nvd.nist.gov/vuln/detail/CVE-2026-9940 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9940

Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-9939 – Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allow... https://nvd.nist.gov/vuln/detail/CVE-2026-9939 https://nvd.nist.gov/vuln/detail/CVE-2026-9939 Thu, 28 May 2026 23:16:52 +0000 High CVE-2026-9939

Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-9938 – Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9938 https://nvd.nist.gov/vuln/detail/CVE-2026-9938 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9938

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2026-9937 – Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed... https://nvd.nist.gov/vuln/detail/CVE-2026-9937 https://nvd.nist.gov/vuln/detail/CVE-2026-9937 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9937

Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9936 – Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9936 https://nvd.nist.gov/vuln/detail/CVE-2026-9936 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9936

Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9934 – Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9934 https://nvd.nist.gov/vuln/detail/CVE-2026-9934 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9934

Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9933 – Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9933 https://nvd.nist.gov/vuln/detail/CVE-2026-9933 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9933

Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9932 – Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9932 https://nvd.nist.gov/vuln/detail/CVE-2026-9932 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9932

Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9931 – Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote ... https://nvd.nist.gov/vuln/detail/CVE-2026-9931 https://nvd.nist.gov/vuln/detail/CVE-2026-9931 Thu, 28 May 2026 23:16:51 +0000 High CVE-2026-9931

Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9928 – Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 ... https://nvd.nist.gov/vuln/detail/CVE-2026-9928 https://nvd.nist.gov/vuln/detail/CVE-2026-9928 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9928

Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-9927 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9927 https://nvd.nist.gov/vuln/detail/CVE-2026-9927 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9927

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9926 – Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a... https://nvd.nist.gov/vuln/detail/CVE-2026-9926 https://nvd.nist.gov/vuln/detail/CVE-2026-9926 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9926

Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-9925 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9925 https://nvd.nist.gov/vuln/detail/CVE-2026-9925 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9925

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9924 – Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.21... https://nvd.nist.gov/vuln/detail/CVE-2026-9924 https://nvd.nist.gov/vuln/detail/CVE-2026-9924 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9924

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-9923 – Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9923 https://nvd.nist.gov/vuln/detail/CVE-2026-9923 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9923

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9922 – Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9922 https://nvd.nist.gov/vuln/detail/CVE-2026-9922 Thu, 28 May 2026 23:16:50 +0000 High CVE-2026-9922

Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9918 – Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216 al... https://nvd.nist.gov/vuln/detail/CVE-2026-9918 https://nvd.nist.gov/vuln/detail/CVE-2026-9918 Thu, 28 May 2026 23:16:49 +0000 Critical CVE-2026-9918

Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 9.6 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-9916 – Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9916 https://nvd.nist.gov/vuln/detail/CVE-2026-9916 Thu, 28 May 2026 23:16:49 +0000 High CVE-2026-9916

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9915 – Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a... https://nvd.nist.gov/vuln/detail/CVE-2026-9915 https://nvd.nist.gov/vuln/detail/CVE-2026-9915 Thu, 28 May 2026 23:16:49 +0000 High CVE-2026-9915

Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-9914 – Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14... https://nvd.nist.gov/vuln/detail/CVE-2026-9914 https://nvd.nist.gov/vuln/detail/CVE-2026-9914 Thu, 28 May 2026 23:16:49 +0000 High CVE-2026-9914

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9910 – Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 al... https://nvd.nist.gov/vuln/detail/CVE-2026-9910 https://nvd.nist.gov/vuln/detail/CVE-2026-9910 Thu, 28 May 2026 23:16:49 +0000 High CVE-2026-9910

Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-9909 – Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo... https://nvd.nist.gov/vuln/detail/CVE-2026-9909 https://nvd.nist.gov/vuln/detail/CVE-2026-9909 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9909

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-472

View on NVD

]]> [High] CVE-2026-9906 – Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re... https://nvd.nist.gov/vuln/detail/CVE-2026-9906 https://nvd.nist.gov/vuln/detail/CVE-2026-9906 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9906

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9905 – Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778... https://nvd.nist.gov/vuln/detail/CVE-2026-9905 https://nvd.nist.gov/vuln/detail/CVE-2026-9905 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9905

Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9904 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9904 https://nvd.nist.gov/vuln/detail/CVE-2026-9904 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9904

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9902 – Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed... https://nvd.nist.gov/vuln/detail/CVE-2026-9902 https://nvd.nist.gov/vuln/detail/CVE-2026-9902 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9902

Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9901 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9901 https://nvd.nist.gov/vuln/detail/CVE-2026-9901 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9901

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9900 – Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9900 https://nvd.nist.gov/vuln/detail/CVE-2026-9900 Thu, 28 May 2026 23:16:48 +0000 High CVE-2026-9900

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9899 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9899 https://nvd.nist.gov/vuln/detail/CVE-2026-9899 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9899

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9898 – Insufficient validation of untrusted input in GPU in Google Chrome on Android pr... https://nvd.nist.gov/vuln/detail/CVE-2026-9898 https://nvd.nist.gov/vuln/detail/CVE-2026-9898 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9898

Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9897 – Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote ... https://nvd.nist.gov/vuln/detail/CVE-2026-9897 https://nvd.nist.gov/vuln/detail/CVE-2026-9897 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9897

Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9896 – Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a rem... https://nvd.nist.gov/vuln/detail/CVE-2026-9896 https://nvd.nist.gov/vuln/detail/CVE-2026-9896 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9895 – Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a rem... https://nvd.nist.gov/vuln/detail/CVE-2026-9895 https://nvd.nist.gov/vuln/detail/CVE-2026-9895 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9895

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-9894 – Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote ... https://nvd.nist.gov/vuln/detail/CVE-2026-9894 https://nvd.nist.gov/vuln/detail/CVE-2026-9894 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9894

Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9893 – Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9893 https://nvd.nist.gov/vuln/detail/CVE-2026-9893 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9893

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9892 – Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0... https://nvd.nist.gov/vuln/detail/CVE-2026-9892 https://nvd.nist.gov/vuln/detail/CVE-2026-9892 Thu, 28 May 2026 23:16:47 +0000 High CVE-2026-9892

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-269

View on NVD

]]> [Critical] CVE-2026-9891 – Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9891 https://nvd.nist.gov/vuln/detail/CVE-2026-9891 Thu, 28 May 2026 23:16:47 +0000 Critical CVE-2026-9891

Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Critical)

CVSS: 9.0 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9890 – Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed... https://nvd.nist.gov/vuln/detail/CVE-2026-9890 https://nvd.nist.gov/vuln/detail/CVE-2026-9890 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9890

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9889 – Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0... https://nvd.nist.gov/vuln/detail/CVE-2026-9889 https://nvd.nist.gov/vuln/detail/CVE-2026-9889 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9889

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-9888 – Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 al... https://nvd.nist.gov/vuln/detail/CVE-2026-9888 https://nvd.nist.gov/vuln/detail/CVE-2026-9888 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9887 – Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9887 https://nvd.nist.gov/vuln/detail/CVE-2026-9887 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9887

Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted PAC script. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9886 – Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a... https://nvd.nist.gov/vuln/detail/CVE-2026-9886 https://nvd.nist.gov/vuln/detail/CVE-2026-9886 Thu, 28 May 2026 23:16:46 +0000 Critical CVE-2026-9886

Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 9.6 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9885 – Insufficient validation of untrusted input in UI in Google Chrome on Mac prior t... https://nvd.nist.gov/vuln/detail/CVE-2026-9885 https://nvd.nist.gov/vuln/detail/CVE-2026-9885 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9885

Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9884 – Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowe... https://nvd.nist.gov/vuln/detail/CVE-2026-9884 https://nvd.nist.gov/vuln/detail/CVE-2026-9884 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9884

Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9883 – Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9883 https://nvd.nist.gov/vuln/detail/CVE-2026-9883 Thu, 28 May 2026 23:16:46 +0000 High CVE-2026-9883

Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9881 – Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9881 https://nvd.nist.gov/vuln/detail/CVE-2026-9881 Thu, 28 May 2026 23:16:46 +0000 Critical CVE-2026-9881

Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Critical)

CVSS: 9.0 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9880 – Insufficient validation of untrusted input in WebGL in Google Chrome prior to 14... https://nvd.nist.gov/vuln/detail/CVE-2026-9880 https://nvd.nist.gov/vuln/detail/CVE-2026-9880 Thu, 28 May 2026 23:16:45 +0000 High CVE-2026-9880

Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-9879 – Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a ... https://nvd.nist.gov/vuln/detail/CVE-2026-9879 https://nvd.nist.gov/vuln/detail/CVE-2026-9879 Thu, 28 May 2026 23:16:45 +0000 High CVE-2026-9879

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-9878 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9878 https://nvd.nist.gov/vuln/detail/CVE-2026-9878 Thu, 28 May 2026 23:16:45 +0000 High CVE-2026-9878

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9877 – Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot... https://nvd.nist.gov/vuln/detail/CVE-2026-9877 https://nvd.nist.gov/vuln/detail/CVE-2026-9877 Thu, 28 May 2026 23:16:45 +0000 High CVE-2026-9877

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.3 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9876 – Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allo... https://nvd.nist.gov/vuln/detail/CVE-2026-9876 https://nvd.nist.gov/vuln/detail/CVE-2026-9876 Thu, 28 May 2026 23:16:45 +0000 Critical CVE-2026-9876

Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 9.6 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9875 – Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 ... https://nvd.nist.gov/vuln/detail/CVE-2026-9875 https://nvd.nist.gov/vuln/detail/CVE-2026-9875 Thu, 28 May 2026 23:16:45 +0000 Critical CVE-2026-9875

Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 9.6 · CWE: CWE-125

View on NVD

]]> [Critical] CVE-2026-9874 – Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote... https://nvd.nist.gov/vuln/detail/CVE-2026-9874 https://nvd.nist.gov/vuln/detail/CVE-2026-9874 Thu, 28 May 2026 23:16:45 +0000 Critical CVE-2026-9874

Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 9.6 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-9873 – Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a rem... https://nvd.nist.gov/vuln/detail/CVE-2026-9873 https://nvd.nist.gov/vuln/detail/CVE-2026-9873 Thu, 28 May 2026 23:16:45 +0000 High CVE-2026-9873

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-9872 – Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 a... https://nvd.nist.gov/vuln/detail/CVE-2026-9872 https://nvd.nist.gov/vuln/detail/CVE-2026-9872 Thu, 28 May 2026 23:16:45 +0000 Critical CVE-2026-9872

Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVSS: 9.6 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-10022 – Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacke... https://nvd.nist.gov/vuln/detail/CVE-2026-10022 https://nvd.nist.gov/vuln/detail/CVE-2026-10022 Thu, 28 May 2026 23:16:44 +0000 High CVE-2026-10022

Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)

CVSS: 8.8 · CWE: CWE-843

View on NVD

]]>