Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-95307

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:55
  • Zuletzt bearbeitet 30.09.2026 20:18:28

UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

8.1

CVE-2026-95333

  • EPSS 0.42%
  • Veröffentlicht 29.09.2026 17:31:55
  • Zuletzt bearbeitet 30.09.2026 16:28:03

Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

4.4

CVE-2026-95358

Exploit
  • EPSS 0.1%
  • Veröffentlicht 29.09.2026 17:31:55
  • Zuletzt bearbeitet 01.10.2026 17:29:03

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium)

4.3

CVE-2026-95289

Exploit
  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 17:31:54
  • Zuletzt bearbeitet 30.09.2026 16:30:20

Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-95311

  • EPSS 0.46%
  • Veröffentlicht 29.09.2026 17:31:54
  • Zuletzt bearbeitet 30.09.2026 20:29:43

Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

8

CVE-2026-95344

Exploit
  • EPSS 0.21%
  • Veröffentlicht 29.09.2026 17:31:54
  • Zuletzt bearbeitet 01.10.2026 15:05:09

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium)

9.6

CVE-2026-95347

  • EPSS 0.43%
  • Veröffentlicht 29.09.2026 17:31:54
  • Zuletzt bearbeitet 30.09.2026 16:27:01

Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

3.1

CVE-2026-95312

  • EPSS 0.24%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 16:29:52

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-95321

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 14:57:37

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-95323

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 16:29:01

UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)