Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2026-13909

  • EPSS 0.41%
  • Veröffentlicht 30.06.2026 23:17:04
  • Zuletzt bearbeitet 02.07.2026 14:32:20

Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Mediu...

8.8

CVE-2026-13888

  • EPSS 0.44%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 02.07.2026 05:16:35

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-13889

  • EPSS 0.38%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 19:32:53

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-13890

  • EPSS 0.34%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 15:42:39

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security se...

7.5

CVE-2026-13891

  • EPSS 0.39%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 02.07.2026 05:16:35

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: ...

6.5

CVE-2026-13892

  • EPSS 0.36%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 19:32:01

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security sever...

6.5

CVE-2026-13893

  • EPSS 0.37%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 02.07.2026 16:39:31

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

6.5

CVE-2026-13894

  • EPSS 0.25%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 19:31:54

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2026-13895

  • EPSS 0.27%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 15:42:24

Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-13896

  • EPSS 0.31%
  • Veröffentlicht 30.06.2026 23:17:03
  • Zuletzt bearbeitet 01.07.2026 19:31:34

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)