Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2026-14152

  • EPSS 0.17%
  • Veröffentlicht 30.06.2026 23:17:26
  • Zuletzt bearbeitet 01.07.2026 19:16:49

Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

5.3

CVE-2026-14153

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:26
  • Zuletzt bearbeitet 01.07.2026 15:51:56

Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.8

CVE-2026-14154

  • EPSS 0.13%
  • Veröffentlicht 30.06.2026 23:17:26
  • Zuletzt bearbeitet 01.07.2026 15:51:48

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)

6.5

CVE-2026-14155

  • EPSS 0.21%
  • Veröffentlicht 30.06.2026 23:17:26
  • Zuletzt bearbeitet 02.07.2026 13:43:37

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-14156

  • EPSS 0.21%
  • Veröffentlicht 30.06.2026 23:17:26
  • Zuletzt bearbeitet 02.07.2026 13:53:59

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-14135

  • EPSS 0.17%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 19:16:49

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14136

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 20:02:01

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.2

CVE-2026-14137

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 06.07.2026 18:52:39

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium sec...

4.2

CVE-2026-14138

  • EPSS 0.16%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 15:54:53

Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security seve...

4.2

CVE-2026-14139

  • EPSS 0.16%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 15:54:03

Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)