CVE-2026-9922
- EPSS 0.26%
- Veröffentlicht 28.05.2026 22:25:25
- Zuletzt bearbeitet 29.05.2026 16:46:01
Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9923
- EPSS 0.25%
- Veröffentlicht 28.05.2026 22:25:25
- Zuletzt bearbeitet 01.06.2026 18:48:09
Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9924
- EPSS 0.25%
- Veröffentlicht 28.05.2026 22:25:25
- Zuletzt bearbeitet 01.06.2026 18:47:58
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9919
- EPSS 0.22%
- Veröffentlicht 28.05.2026 22:25:24
- Zuletzt bearbeitet 01.06.2026 18:48:34
Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9920
- EPSS 0.21%
- Veröffentlicht 28.05.2026 22:25:24
- Zuletzt bearbeitet 01.06.2026 18:48:25
Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9921
- EPSS 0.24%
- Veröffentlicht 28.05.2026 22:25:24
- Zuletzt bearbeitet 01.06.2026 18:48:16
Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9916
- EPSS 0.22%
- Veröffentlicht 28.05.2026 22:25:23
- Zuletzt bearbeitet 01.06.2026 18:45:58
Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9917
- EPSS 0.27%
- Veröffentlicht 28.05.2026 22:25:23
- Zuletzt bearbeitet 01.06.2026 18:48:51
Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9918
- EPSS 0.24%
- Veröffentlicht 28.05.2026 22:25:23
- Zuletzt bearbeitet 01.06.2026 18:48:43
Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-9913
- EPSS 0.23%
- Veröffentlicht 28.05.2026 22:25:22
- Zuletzt bearbeitet 01.06.2026 18:46:16
Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)