Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-79015

  • EPSS 0.31%
  • Veröffentlicht 25.08.2026 20:10:54
  • Zuletzt bearbeitet 28.08.2026 14:40:36

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-79018

  • EPSS 0.27%
  • Veröffentlicht 25.08.2026 20:10:54
  • Zuletzt bearbeitet 27.08.2026 17:50:36

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-79056

  • EPSS 0.4%
  • Veröffentlicht 25.08.2026 20:10:54
  • Zuletzt bearbeitet 27.08.2026 04:17:16

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-79108

  • EPSS 0.22%
  • Veröffentlicht 25.08.2026 20:10:54
  • Zuletzt bearbeitet 31.08.2026 16:53:48

UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security sev...

6.5

CVE-2026-79239

  • EPSS 0.17%
  • Veröffentlicht 25.08.2026 20:10:54
  • Zuletzt bearbeitet 27.08.2026 19:04:20

Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-78896

  • EPSS 0.25%
  • Veröffentlicht 25.08.2026 20:10:53
  • Zuletzt bearbeitet 27.08.2026 16:24:41

Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-79009

  • EPSS 0.22%
  • Veröffentlicht 25.08.2026 20:10:53
  • Zuletzt bearbeitet 28.08.2026 14:40:58

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

9.1

CVE-2026-79058

  • EPSS 0.23%
  • Veröffentlicht 25.08.2026 20:10:53
  • Zuletzt bearbeitet 31.08.2026 16:37:09

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-79060

  • EPSS 0.19%
  • Veröffentlicht 25.08.2026 20:10:53
  • Zuletzt bearbeitet 31.08.2026 16:37:14

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2026-79177

  • EPSS 0.21%
  • Veröffentlicht 25.08.2026 20:10:53
  • Zuletzt bearbeitet 28.08.2026 14:37:01

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)