Google

Chrome

5395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.3

CVE-2026-13834

  • EPSS 0.28%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:22:18

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit...

8.8

CVE-2026-13835

  • EPSS 0.28%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:38:58

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

6.1

CVE-2026-13836

  • EPSS 0.2%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:38:40

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-13837

  • EPSS 0.22%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:38:27

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2026-13838

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:38:02

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2026-13839

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:37:44

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2026-13840

  • EPSS 0.17%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:37:28

Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-13841

  • EPSS 0.26%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 16:38:33

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-13842

  • EPSS 0.22%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 01.07.2026 18:24:44

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-13843

  • EPSS 0.31%
  • Veröffentlicht 30.06.2026 23:16:58
  • Zuletzt bearbeitet 02.07.2026 13:59:12

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium ...