Google

Chrome

5395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-11173

  • EPSS 0.28%
  • Veröffentlicht 04.06.2026 23:05:30
  • Zuletzt bearbeitet 05.06.2026 20:45:18

Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-11174

  • EPSS 0.21%
  • Veröffentlicht 04.06.2026 23:05:30
  • Zuletzt bearbeitet 08.06.2026 14:21:31

Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

8.1

CVE-2026-11170

  • EPSS 0.24%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 08.06.2026 14:21:47

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

8.8

CVE-2026-11171

  • EPSS 0.28%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 05.06.2026 20:45:30

Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-11172

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 08.06.2026 14:21:40

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-11168

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:28
  • Zuletzt bearbeitet 08.06.2026 14:22:05

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium s...

8.1

CVE-2026-11169

  • EPSS 0.21%
  • Veröffentlicht 04.06.2026 23:05:28
  • Zuletzt bearbeitet 08.06.2026 14:21:58

Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted XML file. (Chromium security severity: Medium)

6.8

CVE-2026-11166

  • EPSS 0.21%
  • Veröffentlicht 04.06.2026 23:05:27
  • Zuletzt bearbeitet 08.06.2026 14:22:44

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-11167

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:27
  • Zuletzt bearbeitet 08.06.2026 14:22:35

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity...

9.6

CVE-2026-11163

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:26
  • Zuletzt bearbeitet 08.06.2026 14:33:48

Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)