Browse CVEs

MEDIUM 6.5 CVE-2026-11189 Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.3 CVE-2026-11181 Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a cr… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.3 CVE-2026-11184 Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a cr… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.3 CVE-2026-11187 Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafte… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.1 CVE-2026-11186 Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 HIGH 8.8 CVE-2026-11173 Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbit… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.8 CVE-2026-11175 Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted H… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.8 CVE-2026-11177 Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.8 CVE-2026-11179 Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a crafted HTML pag… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 MEDIUM 6.5 CVE-2026-11176 Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.5 CVE-2026-11180 Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pa… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 5.3 CVE-2026-11174 Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer pro… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 CRITICAL 9.6 CVE-2026-11165 Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a craf… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 CRITICAL 9.6 CVE-2026-11167 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 HIGH 8.8 CVE-2026-11164 Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.8 CVE-2026-11171 Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted … Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.8 CVE-2026-11172 Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a cra… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.1 CVE-2026-11169 Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.1 CVE-2026-11170 Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege e… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 MEDIUM 6.8 CVE-2026-11166 Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.5 CVE-2026-11168 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 CRITICAL 9.6 CVE-2026-11163 Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 HIGH 8.6 CVE-2026-11158 Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perfor… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 MEDIUM 6.5 CVE-2026-11160 Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fr… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 5.4 CVE-2026-11157 Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension t… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 CRITICAL 9.6 CVE-2026-11152 Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafte… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 CRITICAL 9.1 CVE-2026-11153 Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted H… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 HIGH 8.8 CVE-2026-11147 Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-11149 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the re… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-11151 Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised … Chrome 149.0.7827.53+ Fix from $1,9502026-06-04