Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-87565

  • EPSS 0.3%
  • Veröffentlicht 09.09.2026 00:10:03
  • Zuletzt bearbeitet 09.09.2026 19:18:23

Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

8.8

CVE-2026-87617

  • EPSS 0.36%
  • Veröffentlicht 09.09.2026 00:10:03
  • Zuletzt bearbeitet 10.09.2026 04:18:29

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-87448

  • EPSS 0.49%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 10.09.2026 04:18:19

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-87459

  • EPSS 0.25%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 09.09.2026 17:03:53

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

4.2

CVE-2026-87502

  • EPSS 0.17%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 09.09.2026 18:09:35

Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-87592

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 10.09.2026 13:46:27

Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

9.8

CVE-2026-87595

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 14.09.2026 21:43:53

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-87620

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:10:02
  • Zuletzt bearbeitet 09.09.2026 17:29:51

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-87511

  • EPSS 0.22%
  • Veröffentlicht 09.09.2026 00:10:01
  • Zuletzt bearbeitet 15.09.2026 17:22:16

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)

6.5

CVE-2026-87522

  • EPSS 0.29%
  • Veröffentlicht 09.09.2026 00:10:01
  • Zuletzt bearbeitet 11.09.2026 19:23:07

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: ...