CVE-2026-11047
- EPSS 0.3%
- Veröffentlicht 04.06.2026 23:04:34
- Zuletzt bearbeitet 23.07.2026 06:10:00
Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: M...
CVE-2026-11048
- EPSS 0.16%
- Veröffentlicht 04.06.2026 23:04:34
- Zuletzt bearbeitet 23.07.2026 06:10:00
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. (Chromium security severity: Med...
CVE-2026-11044
- EPSS 0.29%
- Veröffentlicht 04.06.2026 23:04:33
- Zuletzt bearbeitet 23.07.2026 06:10:00
Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11045
- EPSS 0.29%
- Veröffentlicht 04.06.2026 23:04:33
- Zuletzt bearbeitet 23.07.2026 06:10:00
Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chr...
CVE-2026-11042
- EPSS 0.3%
- Veröffentlicht 04.06.2026 23:04:32
- Zuletzt bearbeitet 23.07.2026 06:10:00
Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11043
- EPSS 0.3%
- Veröffentlicht 04.06.2026 23:04:32
- Zuletzt bearbeitet 23.07.2026 06:10:00
Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11040
- EPSS 0.22%
- Veröffentlicht 04.06.2026 23:04:31
- Zuletzt bearbeitet 23.07.2026 06:10:00
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11041
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:31
- Zuletzt bearbeitet 23.07.2026 06:10:00
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...
CVE-2026-11037
- EPSS 0.28%
- Veröffentlicht 04.06.2026 23:04:30
- Zuletzt bearbeitet 23.07.2026 06:10:00
Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-11038
- EPSS 0.19%
- Veröffentlicht 04.06.2026 23:04:30
- Zuletzt bearbeitet 23.07.2026 06:10:00
Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via malicious network traffic. (Chromium security severity: Medium)