Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-15770

  • EPSS 0.38%
  • Veröffentlicht 14.07.2026 20:09:52
  • Zuletzt bearbeitet 15.07.2026 17:48:57

Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2026-15766

  • EPSS 0.38%
  • Veröffentlicht 14.07.2026 20:09:51
  • Zuletzt bearbeitet 15.07.2026 17:51:11

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-15767

  • EPSS 0.43%
  • Veröffentlicht 14.07.2026 20:09:51
  • Zuletzt bearbeitet 15.07.2026 17:49:36

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

7.5

CVE-2026-15764

Medienbericht
  • EPSS 0.5%
  • Veröffentlicht 14.07.2026 20:09:50
  • Zuletzt bearbeitet 15.07.2026 17:52:02

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Cr...

7.5

CVE-2026-15765

Medienbericht
  • EPSS 0.5%
  • Veröffentlicht 14.07.2026 20:09:50
  • Zuletzt bearbeitet 15.07.2026 17:51:43

Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

8.8

CVE-2026-15107

  • EPSS 0.3%
  • Veröffentlicht 08.07.2026 22:36:06
  • Zuletzt bearbeitet 10.07.2026 05:16:28

Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-15131

  • EPSS 0.22%
  • Veröffentlicht 08.07.2026 22:36:06
  • Zuletzt bearbeitet 09.07.2026 17:49:38

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

6.1

CVE-2026-15127

  • EPSS 0.17%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:59

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

6.1

CVE-2026-15128

  • EPSS 0.17%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:51

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-15130

  • EPSS 0.22%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:42

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)