CVE-2026-106184
- EPSS 0.24%
- Veröffentlicht 06.10.2026 18:41:13
- Zuletzt bearbeitet 08.10.2026 13:05:16
Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106190
- EPSS 0.35%
- Veröffentlicht 06.10.2026 18:41:13
- Zuletzt bearbeitet 08.10.2026 13:06:43
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106240
- EPSS 0.44%
- Veröffentlicht 06.10.2026 18:41:13
- Zuletzt bearbeitet 07.10.2026 13:53:15
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106411
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:13
- Zuletzt bearbeitet 07.10.2026 13:39:57
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106423
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:13
- Zuletzt bearbeitet 07.10.2026 13:38:55
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106233
- EPSS 0.37%
- Veröffentlicht 06.10.2026 18:41:12
- Zuletzt bearbeitet 07.10.2026 15:25:02
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106235
- EPSS 0.38%
- Veröffentlicht 06.10.2026 18:41:12
- Zuletzt bearbeitet 07.10.2026 15:12:20
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106257
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:12
- Zuletzt bearbeitet 07.10.2026 13:11:06
Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106268
- EPSS 0.38%
- Veröffentlicht 06.10.2026 18:41:12
- Zuletzt bearbeitet 07.10.2026 13:53:03
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106278
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:12
- Zuletzt bearbeitet 07.10.2026 13:44:28
Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)