Browse CVEs

HIGH 8.1 CVE-2026-13864 Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious ext… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 7.8 CVE-2026-13863 Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privi… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-13856 Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 MEDIUM 6.5 CVE-2026-13858 Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from proce… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.5 CVE-2026-13862 Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google Chrome on iOS prior to 150.0.7871.47 allowed an attacker i… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.5 CVE-2026-13866 Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer p… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 CRITICAL 9.6 CVE-2026-13846 Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 150.0.7871.47+ Fix from $2,3002026-06-30 CRITICAL 9.6 CVE-2026-13853 Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 150.0.7871.46+ Fix from $2,3002026-06-30 CRITICAL 9.6 CVE-2026-13854 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potent… Chrome 150.0.7871.47+ Fix from $2,3002026-06-30 CRITICAL 9.1 CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass di… Chrome 150.0.7871.47+ Fix from $2,3002026-06-30 CRITICAL 9.1 CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass di… Chrome 150.0.7871.47+ Fix from $2,3002026-06-30 HIGH 8.8 CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to execute arbit… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 8.8 CVE-2026-13845 Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 150.0.7871.46+ Fix from $1,9502026-06-30 HIGH 8.8 CVE-2026-13848 Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 150.0.7871.46+ Fix from $1,9502026-06-30 HIGH 8.6 CVE-2026-13849 Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to potentially p… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-13855 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gest… Chrome 150.0.7871.46+ Fix from $1,9502026-06-30 MEDIUM 6.5 CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-o… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 CRITICAL 9.6 CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had comprom… Chrome 150.0.7871.47+ Fix from $2,3002026-06-30 HIGH 8.8 CVE-2026-13835 Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 8.3 CVE-2026-13834 Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendere… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 8.3 CVE-2026-13841 Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 7.8 CVE-2026-13844 Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a … Chrome 150.0.7871.46+ Fix from $1,9502026-06-30 MEDIUM 6.5 CVE-2026-13838 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.5 CVE-2026-13839 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.5 CVE-2026-13840 Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted H… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-13836 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 HIGH 8.8 CVE-2026-13825 Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 8.8 CVE-2026-13830 Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious netwo… Chrome 150.0.7871.46+ Fix from $1,9502026-06-30 HIGH 8.3 CVE-2026-13829 Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromis… Chrome 150.0.7871.47+ Fix from $1,9502026-06-30 HIGH 8.3 CVE-2026-13832 Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 150.0.7871.47+ Fix from $1,9502026-06-30