Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-15107

  • EPSS 0.3%
  • Veröffentlicht 08.07.2026 22:36:06
  • Zuletzt bearbeitet 10.07.2026 05:16:28

Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-15131

  • EPSS 0.22%
  • Veröffentlicht 08.07.2026 22:36:06
  • Zuletzt bearbeitet 09.07.2026 17:49:38

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

6.1

CVE-2026-15127

  • EPSS 0.17%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:59

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

6.1

CVE-2026-15128

  • EPSS 0.17%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:51

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-15130

  • EPSS 0.22%
  • Veröffentlicht 08.07.2026 22:36:05
  • Zuletzt bearbeitet 09.07.2026 17:49:42

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-15124

  • EPSS 0.21%
  • Veröffentlicht 08.07.2026 22:36:04
  • Zuletzt bearbeitet 09.07.2026 17:50:17

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-15125

  • EPSS 0.29%
  • Veröffentlicht 08.07.2026 22:36:04
  • Zuletzt bearbeitet 10.07.2026 05:16:30

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-15126

  • EPSS 0.3%
  • Veröffentlicht 08.07.2026 22:36:04
  • Zuletzt bearbeitet 10.07.2026 05:16:30

Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-15121

  • EPSS 0.3%
  • Veröffentlicht 08.07.2026 22:36:03
  • Zuletzt bearbeitet 10.07.2026 05:16:29

Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-15122

  • EPSS 0.25%
  • Veröffentlicht 08.07.2026 22:36:03
  • Zuletzt bearbeitet 10.07.2026 05:16:29

Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...