CVE-2026-15124
- EPSS 0.21%
- Veröffentlicht 08.07.2026 22:36:04
- Zuletzt bearbeitet 09.07.2026 17:50:17
Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15125
- EPSS 0.29%
- Veröffentlicht 08.07.2026 22:36:04
- Zuletzt bearbeitet 10.07.2026 05:16:30
Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15126
- EPSS 0.3%
- Veröffentlicht 08.07.2026 22:36:04
- Zuletzt bearbeitet 10.07.2026 05:16:30
Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15121
- EPSS 0.3%
- Veröffentlicht 08.07.2026 22:36:03
- Zuletzt bearbeitet 10.07.2026 05:16:29
Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15122
- EPSS 0.25%
- Veröffentlicht 08.07.2026 22:36:03
- Zuletzt bearbeitet 10.07.2026 05:16:29
Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...
CVE-2026-15123
- EPSS 0.26%
- Veröffentlicht 08.07.2026 22:36:03
- Zuletzt bearbeitet 10.07.2026 05:16:29
Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15118
- EPSS 0.3%
- Veröffentlicht 08.07.2026 22:36:02
- Zuletzt bearbeitet 10.07.2026 05:16:29
Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15119
- EPSS 0.19%
- Veröffentlicht 08.07.2026 22:36:02
- Zuletzt bearbeitet 10.07.2026 05:16:29
Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15120
- EPSS 0.23%
- Veröffentlicht 08.07.2026 22:36:02
- Zuletzt bearbeitet 10.07.2026 05:16:29
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-15115
- EPSS 0.1%
- Veröffentlicht 08.07.2026 22:36:01
- Zuletzt bearbeitet 09.07.2026 17:20:40
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)