Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-102299

  • EPSS 0.36%
  • Veröffentlicht 29.09.2026 19:45:02
  • Zuletzt bearbeitet 01.10.2026 17:28:43

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-102306

  • EPSS 0.37%
  • Veröffentlicht 29.09.2026 19:45:02
  • Zuletzt bearbeitet 30.09.2026 16:32:11

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-102312

  • EPSS 0.24%
  • Veröffentlicht 29.09.2026 19:45:02
  • Zuletzt bearbeitet 30.09.2026 21:08:25

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)

4.7

CVE-2026-102313

  • EPSS 0.28%
  • Veröffentlicht 29.09.2026 19:45:02
  • Zuletzt bearbeitet 30.09.2026 15:44:55

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.6

CVE-2026-102317

  • EPSS 0.11%
  • Veröffentlicht 29.09.2026 19:45:01
  • Zuletzt bearbeitet 30.09.2026 14:58:06

Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

9.6

CVE-2026-102331

Medienbericht
  • EPSS 0.43%
  • Veröffentlicht 29.09.2026 19:45:01
  • Zuletzt bearbeitet 30.09.2026 13:15:08

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

4.8

CVE-2026-95305

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 30.09.2026 19:47:05

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

4.3

CVE-2026-95340

  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 01.10.2026 15:05:48

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95364

Exploit
  • EPSS 0.23%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 01.10.2026 13:57:03

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-95296

  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 19:55:11

Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)