Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-13959

  • EPSS 0.3%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:22:42

Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-13960

  • EPSS 0.29%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 14:54:25

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-13961

  • EPSS 0.35%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 01.07.2026 15:49:25

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory...

6.5

CVE-2026-13962

  • EPSS 0.35%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:23:06

Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-13963

  • EPSS 0.25%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 14:53:15

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-13964

  • EPSS 0.35%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:33:57

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-13943

  • EPSS 0.41%
  • Veröffentlicht 30.06.2026 23:17:08
  • Zuletzt bearbeitet 02.07.2026 14:26:43

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-13944

  • EPSS 0.25%
  • Veröffentlicht 30.06.2026 23:17:08
  • Zuletzt bearbeitet 02.07.2026 16:43:51

Inappropriate implementation in DataTransfer in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severit...

3.1

CVE-2026-13945

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:17:08
  • Zuletzt bearbeitet 02.07.2026 16:44:07

Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severit...

4.3

CVE-2026-13946

  • EPSS 0.28%
  • Veröffentlicht 30.06.2026 23:17:08
  • Zuletzt bearbeitet 02.07.2026 16:44:20

Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)