CVE-2026-8568
- EPSS 0.03%
- Veröffentlicht 14.05.2026 19:52:32
- Zuletzt bearbeitet 19.05.2026 15:18:10
Insufficient policy enforcement in AI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8569
- EPSS 0.25%
- Veröffentlicht 14.05.2026 19:52:32
- Zuletzt bearbeitet 21.05.2026 17:09:04
Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-8565
- EPSS 0.13%
- Veröffentlicht 14.05.2026 19:52:31
- Zuletzt bearbeitet 21.05.2026 17:09:16
Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Me...
CVE-2026-8566
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:31
- Zuletzt bearbeitet 19.05.2026 17:29:18
Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8567
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:31
- Zuletzt bearbeitet 19.05.2026 19:28:06
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8562
- EPSS 0.19%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 18.05.2026 18:21:27
Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8563
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 21.05.2026 17:08:10
Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8564
- EPSS 0.16%
- Veröffentlicht 14.05.2026 19:52:30
- Zuletzt bearbeitet 21.05.2026 17:09:27
Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8559
- EPSS 0.18%
- Veröffentlicht 14.05.2026 19:52:29
- Zuletzt bearbeitet 19.05.2026 14:26:54
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2026-8560
- EPSS 0.25%
- Veröffentlicht 14.05.2026 19:52:29
- Zuletzt bearbeitet 19.05.2026 14:27:07
Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)