CVE-2026-14052
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:17
- Zuletzt bearbeitet 01.07.2026 18:38:42
Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14053
- EPSS 0.17%
- Veröffentlicht 30.06.2026 23:17:17
- Zuletzt bearbeitet 01.07.2026 18:38:33
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14054
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:17
- Zuletzt bearbeitet 01.07.2026 16:14:32
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14055
- EPSS 0.26%
- Veröffentlicht 30.06.2026 23:17:17
- Zuletzt bearbeitet 01.07.2026 19:16:46
Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...
CVE-2026-14056
- EPSS 0.24%
- Veröffentlicht 30.06.2026 23:17:17
- Zuletzt bearbeitet 01.07.2026 19:16:46
Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severi...
CVE-2026-14034
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:16
- Zuletzt bearbeitet 01.07.2026 15:45:40
Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14035
- EPSS 0.23%
- Veröffentlicht 30.06.2026 23:17:16
- Zuletzt bearbeitet 01.07.2026 15:45:29
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14036
- EPSS 0.26%
- Veröffentlicht 30.06.2026 23:17:16
- Zuletzt bearbeitet 02.07.2026 14:44:46
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14037
- EPSS 0.25%
- Veröffentlicht 30.06.2026 23:17:16
- Zuletzt bearbeitet 01.07.2026 15:44:31
Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14038
- EPSS 0.26%
- Veröffentlicht 30.06.2026 23:17:16
- Zuletzt bearbeitet 01.07.2026 19:16:45
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security ...