CVE-2026-7358
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:56
- Zuletzt bearbeitet 30.04.2026 16:37:52
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7359
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:56
- Zuletzt bearbeitet 30.04.2026 16:37:44
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7333
- EPSS 0.07%
- Veröffentlicht 28.04.2026 22:35:55
- Zuletzt bearbeitet 30.04.2026 18:30:10
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7360
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:55
- Zuletzt bearbeitet 30.04.2026 16:37:36
Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High...
CVE-2026-7343
- EPSS 0.07%
- Veröffentlicht 28.04.2026 22:35:54
- Zuletzt bearbeitet 30.04.2026 16:36:22
Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7344
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:54
- Zuletzt bearbeitet 30.04.2026 16:36:12
Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Criti...
CVE-2026-7361
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:53
- Zuletzt bearbeitet 30.04.2026 16:37:31
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7363
- EPSS 0.03%
- Veröffentlicht 28.04.2026 22:35:53
- Zuletzt bearbeitet 30.04.2026 16:37:25
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-6921
- EPSS 0.08%
- Veröffentlicht 23.04.2026 16:12:24
- Zuletzt bearbeitet 24.04.2026 16:39:30
Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-6920
- EPSS 0.09%
- Veröffentlicht 23.04.2026 16:12:23
- Zuletzt bearbeitet 24.04.2026 16:39:41
Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)