Google

Chrome

5395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-13954

  • EPSS 0.26%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 01.07.2026 15:49:42

Insufficient policy enforcement in XML in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

3.3

CVE-2026-13955

  • EPSS 0.09%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:45:46

Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Medium)

4.2

CVE-2026-13956

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:23:57

Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2026-13957

  • EPSS 0.14%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 13:58:55

Incorrect security UI in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Med...

6.5

CVE-2026-13958

  • EPSS 0.29%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 01.07.2026 15:49:34

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-13959

  • EPSS 0.22%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:22:42

Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-13960

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 14:54:25

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-13961

  • EPSS 0.27%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 01.07.2026 15:49:25

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory...

6.5

CVE-2026-13962

  • EPSS 0.22%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 16:23:06

Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-13963

  • EPSS 0.13%
  • Veröffentlicht 30.06.2026 23:17:09
  • Zuletzt bearbeitet 02.07.2026 14:53:15

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)