Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-106374

  • EPSS 0.36%
  • Veröffentlicht 06.10.2026 18:41:39
  • Zuletzt bearbeitet 07.10.2026 13:46:26

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

8.8

CVE-2026-106249

  • EPSS 0.24%
  • Veröffentlicht 06.10.2026 18:41:39
  • Zuletzt bearbeitet 07.10.2026 13:39:36

Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-106237

  • EPSS 0.25%
  • Veröffentlicht 06.10.2026 18:41:39
  • Zuletzt bearbeitet 09.10.2026 22:16:56

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-106179

  • EPSS 0.21%
  • Veröffentlicht 06.10.2026 18:41:39
  • Zuletzt bearbeitet 08.10.2026 13:05:59

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-106417

  • EPSS 0.34%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 07.10.2026 13:10:43

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-106296

  • EPSS 0.16%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 08.10.2026 17:17:47

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-106285

  • EPSS 0.2%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 07.10.2026 13:43:43

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-106259

  • EPSS 0.16%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 08.10.2026 18:06:55

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

8.3

CVE-2026-106221

  • EPSS 0.3%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 09.10.2026 02:16:58

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

8.8

CVE-2026-106220

  • EPSS 0.32%
  • Veröffentlicht 06.10.2026 18:41:38
  • Zuletzt bearbeitet 08.10.2026 01:26:49

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)