Browse CVEs

HIGH 7.5 CVE-2026-11632 Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures … Chrome 149.0.7827.103+ Fix from $1,9502026-06-09 MEDIUM 6.8 CVE-2026-11628 Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption via physical access … Chrome 149.0.7827.103+ Fix from $1,6002026-06-09 HIGH 8.8 CVE-2026-11303 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.8 CVE-2026-11304 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.8 CVE-2026-11305 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.8 CVE-2026-11306 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.8 CVE-2026-11307 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.3 CVE-2026-11308 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious ex… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 HIGH 8.8 CVE-2026-11295 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation … Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.8 CVE-2026-11301 Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds me… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 7.7 CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navig… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 7.5 CVE-2026-11296 Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proce… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-11299 Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process … Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 CRITICAL 9.6 CVE-2026-11293 Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML … Chrome 149.0.7827.53+ Fix from $2,3002026-06-05 MEDIUM 6.5 CVE-2026-11287 Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the re… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11288 Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11289 Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted H… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 5.0 CVE-2026-11290 Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious … Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 CRITICAL 9.6 CVE-2026-11282 Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbo… Chrome 149.0.7827.53+ Fix from $2,3002026-06-05 HIGH 8.8 CVE-2026-11279 Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-11283 Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11284 Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 5.0 CVE-2026-11281 Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive informatio… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 HIGH 8.8 CVE-2026-11272 Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a u… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-11270 Inappropriate implementation in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craft… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11271 Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specifi… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11275 Inappropriate implementation in Page Info in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the render… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11278 Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.1 CVE-2026-11273 Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engag… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 5.1 CVE-2026-11276 Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05