CVE-2026-8566
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:31
- Zuletzt bearbeitet 19.05.2026 17:29:18
Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8567
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:31
- Zuletzt bearbeitet 19.05.2026 19:28:06
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8562
- EPSS 0.19%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 18.05.2026 18:21:27
Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8563
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 21.05.2026 17:08:10
Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8564
- EPSS 0.16%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 21.05.2026 17:09:27
Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8559
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:29
- Zuletzt bearbeitet 19.05.2026 14:26:54
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2026-8560
- EPSS 0.25%
- Veröffentlicht 14.05.2026 19:52:29
- Zuletzt bearbeitet 19.05.2026 14:27:07
Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8561
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:29
- Zuletzt bearbeitet 18.05.2026 18:22:03
Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8555
- EPSS 0.28%
- Veröffentlicht 14.05.2026 19:52:28
- Zuletzt bearbeitet 19.05.2026 14:26:38
Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-8556
- EPSS 0.2%
- Veröffentlicht 14.05.2026 19:52:28
- Zuletzt bearbeitet 19.05.2026 14:26:47
Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)