Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.09%
  • Veröffentlicht 06.10.2026 18:41:24
  • Zuletzt bearbeitet 06.10.2026 19:57:00

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)

  • EPSS 0.21%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 08.10.2026 13:05:39

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.18%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:39:59

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.18%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:44:02

UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.19%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:43:06

UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.17%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:42:32

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.18%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:41:09

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

  • EPSS 0.19%
  • Veröffentlicht 06.10.2026 18:41:23
  • Zuletzt bearbeitet 07.10.2026 13:10:49

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

  • EPSS 0.16%
  • Veröffentlicht 06.10.2026 18:41:22
  • Zuletzt bearbeitet 07.10.2026 13:12:33

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)

  • EPSS 0.08%
  • Veröffentlicht 06.10.2026 18:41:22
  • Zuletzt bearbeitet 07.10.2026 13:44:22

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium s...