Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-14140

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 06.07.2026 14:49:20

Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14141

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 06.07.2026 14:48:30

Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-14142

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 16:16:43

Inappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14143

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 20:01:58

Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.2

CVE-2026-14144

  • EPSS 0.14%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 15:53:37

Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

6.1

CVE-2026-14145

  • EPSS 0.15%
  • Veröffentlicht 30.06.2026 23:17:25
  • Zuletzt bearbeitet 01.07.2026 15:53:31

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14123

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:24
  • Zuletzt bearbeitet 01.07.2026 20:02:04

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

7.8

CVE-2026-14124

  • EPSS 0.1%
  • Veröffentlicht 30.06.2026 23:17:24
  • Zuletzt bearbeitet 06.07.2026 18:52:59

Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low)

6.5

CVE-2026-14125

  • EPSS 0.25%
  • Veröffentlicht 30.06.2026 23:17:24
  • Zuletzt bearbeitet 01.07.2026 17:09:24

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14126

  • EPSS 0.18%
  • Veröffentlicht 30.06.2026 23:17:24
  • Zuletzt bearbeitet 06.07.2026 14:51:11

Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)