Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.9

CVE-2026-95316

  • EPSS 0.11%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 16:29:33

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity: Low)

6.5

CVE-2026-95328

  • EPSS 0.23%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 14:53:54

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)

4.3

CVE-2026-95342

Exploit
  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 01.10.2026 15:05:29

Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95288

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 30.09.2026 16:30:27

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95309

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 30.09.2026 20:19:13

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-95361

  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 02.10.2026 13:39:23

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

8.8

CVE-2026-95380

  • EPSS 0.4%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 02.10.2026 15:13:11

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

8.3

CVE-2026-95319

  • EPSS 0.41%
  • Veröffentlicht 29.09.2026 17:31:58
  • Zuletzt bearbeitet 30.09.2026 16:29:15

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

8.4

CVE-2026-95326

  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 17:31:58
  • Zuletzt bearbeitet 02.10.2026 20:00:10

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-95368

  • EPSS 0.22%
  • Veröffentlicht 29.09.2026 17:31:58
  • Zuletzt bearbeitet 01.10.2026 13:56:52

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)