CVE-2026-84328
- EPSS 0.16%
- Veröffentlicht 01.09.2026 23:42:27
- Zuletzt bearbeitet 03.09.2026 17:11:41
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-84333
- EPSS 0.25%
- Veröffentlicht 01.09.2026 23:42:27
- Zuletzt bearbeitet 08.09.2026 17:51:40
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-84347
- EPSS 0.28%
- Veröffentlicht 01.09.2026 23:42:27
- Zuletzt bearbeitet 03.09.2026 17:18:25
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-84351
- EPSS 0.26%
- Veröffentlicht 01.09.2026 23:42:27
- Zuletzt bearbeitet 03.09.2026 17:37:11
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- EPSS 0.27%
- Veröffentlicht 01.09.2026 23:42:26
- Zuletzt bearbeitet 03.09.2026 17:12:44
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVE-2026-84349
- EPSS 0.23%
- Veröffentlicht 01.09.2026 23:42:26
- Zuletzt bearbeitet 03.09.2026 17:15:27
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-84357
- EPSS 0.18%
- Veröffentlicht 01.09.2026 23:42:26
- Zuletzt bearbeitet 03.09.2026 17:19:47
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: High)
CVE-2026-84359
- EPSS 0.14%
- Veröffentlicht 01.09.2026 23:42:26
- Zuletzt bearbeitet 03.09.2026 17:15:04
Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-84352
- EPSS 0.28%
- Veröffentlicht 01.09.2026 23:42:25
- Zuletzt bearbeitet 08.09.2026 17:46:26
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-84353
- EPSS 0.28%
- Veröffentlicht 01.09.2026 23:42:25
- Zuletzt bearbeitet 08.09.2026 17:42:21
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Crit...