Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.4

CVE-2026-102319

  • EPSS 0.21%
  • Veröffentlicht 29.09.2026 19:45:05
  • Zuletzt bearbeitet 30.09.2026 14:57:51

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-102324

  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 19:45:05
  • Zuletzt bearbeitet 30.09.2026 14:56:31

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severi...

6.1

CVE-2026-102329

  • EPSS 0.18%
  • Veröffentlicht 29.09.2026 19:45:05
  • Zuletzt bearbeitet 30.09.2026 19:35:51

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-102304

  • EPSS 0.31%
  • Veröffentlicht 29.09.2026 19:45:04
  • Zuletzt bearbeitet 30.09.2026 21:10:32

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-102309

  • EPSS 0.31%
  • Veröffentlicht 29.09.2026 19:45:04
  • Zuletzt bearbeitet 30.09.2026 16:25:23

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-102316

  • EPSS 0.31%
  • Veröffentlicht 29.09.2026 19:45:04
  • Zuletzt bearbeitet 30.09.2026 15:42:04

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-102325

  • EPSS 0.23%
  • Veröffentlicht 29.09.2026 19:45:04
  • Zuletzt bearbeitet 30.09.2026 14:56:27

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-102328

  • EPSS 0.33%
  • Veröffentlicht 29.09.2026 19:45:04
  • Zuletzt bearbeitet 30.09.2026 14:56:17

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-102300

  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 19:45:03
  • Zuletzt bearbeitet 01.10.2026 17:28:29

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-102303

  • EPSS 0.28%
  • Veröffentlicht 29.09.2026 19:45:03
  • Zuletzt bearbeitet 30.09.2026 13:58:27

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)