Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-14088

  • EPSS 0.26%
  • Veröffentlicht 30.06.2026 23:17:20
  • Zuletzt bearbeitet 02.07.2026 13:33:57

Uninitialized Use in Canvas in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14089

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:20
  • Zuletzt bearbeitet 02.07.2026 14:13:18

Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

6.1

CVE-2026-14068

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 01.07.2026 16:28:40

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium secu...

6.5

CVE-2026-14069

  • EPSS 0.24%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 01.07.2026 16:28:15

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-14070

  • EPSS 0.26%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 01.07.2026 16:27:53

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-14071

  • EPSS 0.24%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 01.07.2026 16:23:31

Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14072

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 02.07.2026 13:44:02

Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14073

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 01.07.2026 16:21:37

Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-14074

  • EPSS 0.29%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 06.07.2026 19:51:30

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-14075

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:19
  • Zuletzt bearbeitet 06.07.2026 18:55:01

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)