CVE-2026-13851
- EPSS 0.35%
- Veröffentlicht 30.06.2026 23:16:59
- Zuletzt bearbeitet 02.07.2026 14:52:29
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13852
- EPSS 0.35%
- Veröffentlicht 30.06.2026 23:16:59
- Zuletzt bearbeitet 02.07.2026 13:38:46
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13853
- EPSS 0.36%
- Veröffentlicht 30.06.2026 23:16:59
- Zuletzt bearbeitet 01.07.2026 19:16:38
Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13854
- EPSS 0.36%
- Veröffentlicht 30.06.2026 23:16:59
- Zuletzt bearbeitet 01.07.2026 19:16:39
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13855
- EPSS 0.4%
- Veröffentlicht 30.06.2026 23:16:59
- Zuletzt bearbeitet 02.07.2026 05:16:34
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13834
- EPSS 0.4%
- Veröffentlicht 30.06.2026 23:16:58
- Zuletzt bearbeitet 02.07.2026 16:22:18
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit...
CVE-2026-13835
- EPSS 0.41%
- Veröffentlicht 30.06.2026 23:16:58
- Zuletzt bearbeitet 02.07.2026 16:38:58
Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13836
- EPSS 0.29%
- Veröffentlicht 30.06.2026 23:16:58
- Zuletzt bearbeitet 02.07.2026 16:38:40
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13837
- EPSS 0.29%
- Veröffentlicht 30.06.2026 23:16:58
- Zuletzt bearbeitet 02.07.2026 16:38:27
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13838
- EPSS 0.28%
- Veröffentlicht 30.06.2026 23:16:58
- Zuletzt bearbeitet 02.07.2026 16:38:02
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)