Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.7

CVE-2026-106290

  • EPSS 0.19%
  • Veröffentlicht 06.10.2026 18:41:21
  • Zuletzt bearbeitet 08.10.2026 17:18:47

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

4.4

CVE-2026-106326

  • EPSS 0.08%
  • Veröffentlicht 06.10.2026 18:41:21
  • Zuletzt bearbeitet 08.10.2026 16:17:02

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium)

8.3

CVE-2026-106378

  • EPSS 0.32%
  • Veröffentlicht 06.10.2026 18:41:21
  • Zuletzt bearbeitet 07.10.2026 13:45:31

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Me...

5.4

CVE-2026-106406

  • EPSS 0.19%
  • Veröffentlicht 06.10.2026 18:41:21
  • Zuletzt bearbeitet 07.10.2026 13:40:21

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

7.6

CVE-2026-106196

  • EPSS 0.22%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 08.10.2026 17:17:13

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-106389

  • EPSS 0.17%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 09.10.2026 18:10:18

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

6.1

CVE-2026-106397

  • EPSS 0.18%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 09.10.2026 18:09:29

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-106407

  • EPSS 0.18%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 09.10.2026 14:26:24

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-106408

  • EPSS 0.19%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 09.10.2026 14:26:20

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-106414

  • EPSS 0.34%
  • Veröffentlicht 06.10.2026 18:41:20
  • Zuletzt bearbeitet 07.10.2026 13:13:12

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severi...