CVE-2026-13028
- EPSS 0.29%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 26.06.2026 02:11:29
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13029
- EPSS 0.16%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 18:12:53
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity...
CVE-2026-13030
- EPSS 0.19%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 18:12:41
Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13031
- EPSS 0.23%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 18:12:24
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13032
- EPSS 0.29%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 18:12:08
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13033
- EPSS 0.34%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 18:11:42
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13034
- EPSS 0.12%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 15:23:48
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13035
- EPSS 0.22%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 15:14:12
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: High)
CVE-2026-13036
- EPSS 0.29%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 15:13:56
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13037
- EPSS 0.1%
- Veröffentlicht 24.06.2026 19:17:09
- Zuletzt bearbeitet 25.06.2026 15:13:04
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)