CVE-2026-10888
- EPSS 0.19%
- Veröffentlicht 04.06.2026 23:03:24
- Zuletzt bearbeitet 22.07.2026 20:10:00
Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)
CVE-2026-10885
- EPSS 0.37%
- Veröffentlicht 04.06.2026 23:03:23
- Zuletzt bearbeitet 22.07.2026 20:10:00
Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10886
- EPSS 0.35%
- Veröffentlicht 04.06.2026 23:03:23
- Zuletzt bearbeitet 22.07.2026 20:10:00
Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10882
- EPSS 0.47%
- Veröffentlicht 04.06.2026 23:03:22
- Zuletzt bearbeitet 22.07.2026 20:10:00
Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10883
- EPSS 0.39%
- Veröffentlicht 04.06.2026 23:03:22
- Zuletzt bearbeitet 22.07.2026 20:10:00
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10884
- EPSS 0.29%
- Veröffentlicht 04.06.2026 23:03:22
- Zuletzt bearbeitet 22.07.2026 20:10:00
Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10881
- EPSS 0.39%
- Veröffentlicht 04.06.2026 23:03:21
- Zuletzt bearbeitet 22.07.2026 20:10:00
Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-10019
- EPSS 0.19%
- Veröffentlicht 28.05.2026 22:25:57
- Zuletzt bearbeitet 21.07.2026 10:10:00
Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-10020
- EPSS 0.2%
- Veröffentlicht 28.05.2026 22:25:57
- Zuletzt bearbeitet 21.07.2026 10:10:00
Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...
CVE-2026-10021
- EPSS 0.23%
- Veröffentlicht 28.05.2026 22:25:57
- Zuletzt bearbeitet 21.07.2026 10:10:00
Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)