CVE-2026-14114
- EPSS 0.17%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 06.07.2026 14:51:38
Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)
CVE-2026-14115
- EPSS 0.24%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 02.07.2026 05:16:39
Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14116
- EPSS 0.21%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 02.07.2026 14:14:21
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security seve...
CVE-2026-14117
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 01.07.2026 16:56:40
Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory...
CVE-2026-14118
- EPSS 0.25%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 02.07.2026 13:51:32
Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14119
- EPSS 0.11%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 01.07.2026 16:56:16
Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: L...
CVE-2026-14120
- EPSS 0.27%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 02.07.2026 13:59:20
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14121
- EPSS 0.29%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 02.07.2026 15:16:58
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Low)
CVE-2026-14122
- EPSS 0.18%
- Veröffentlicht 30.06.2026 23:17:23
- Zuletzt bearbeitet 01.07.2026 20:02:07
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14101
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:22
- Zuletzt bearbeitet 02.07.2026 13:55:08
Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity:...