CVE-2026-91732
- EPSS 0.25%
- Veröffentlicht 15.09.2026 20:41:34
- Zuletzt bearbeitet 18.09.2026 14:19:03
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security s...
CVE-2026-91742
- EPSS 0.22%
- Veröffentlicht 15.09.2026 20:41:34
- Zuletzt bearbeitet 21.09.2026 14:19:27
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security sev...
CVE-2026-91711
- EPSS 0.24%
- Veröffentlicht 15.09.2026 20:41:33
- Zuletzt bearbeitet 17.09.2026 13:37:46
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91715
- EPSS 0.26%
- Veröffentlicht 15.09.2026 20:41:33
- Zuletzt bearbeitet 17.09.2026 13:38:11
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91729
- EPSS 0.25%
- Veröffentlicht 15.09.2026 20:41:33
- Zuletzt bearbeitet 17.09.2026 17:54:30
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91737
- EPSS 0.25%
- Veröffentlicht 15.09.2026 20:41:33
- Zuletzt bearbeitet 17.09.2026 16:02:30
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91745
- EPSS 0.25%
- Veröffentlicht 15.09.2026 20:41:33
- Zuletzt bearbeitet 17.09.2026 18:47:44
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91710
- EPSS 0.24%
- Veröffentlicht 15.09.2026 20:41:32
- Zuletzt bearbeitet 17.09.2026 13:37:36
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91716
- EPSS 0.24%
- Veröffentlicht 15.09.2026 20:41:32
- Zuletzt bearbeitet 17.09.2026 13:38:17
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91718
- EPSS 0.24%
- Veröffentlicht 15.09.2026 20:41:32
- Zuletzt bearbeitet 17.09.2026 13:38:40
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)