Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2026-95305

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 30.09.2026 19:47:05

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

4.3

CVE-2026-95340

  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 01.10.2026 15:05:48

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95364

Exploit
  • EPSS 0.23%
  • Veröffentlicht 29.09.2026 17:32:01
  • Zuletzt bearbeitet 01.10.2026 13:57:03

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-95296

  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 19:55:11

Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)

2.9

CVE-2026-95316

  • EPSS 0.11%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 16:29:33

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity: Low)

6.5

CVE-2026-95328

  • EPSS 0.23%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 30.09.2026 14:53:54

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)

4.3

CVE-2026-95342

Exploit
  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:32:00
  • Zuletzt bearbeitet 01.10.2026 15:05:29

Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95288

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 30.09.2026 16:30:27

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-95309

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 30.09.2026 20:19:13

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2026-95361

  • EPSS 0.27%
  • Veröffentlicht 29.09.2026 17:31:59
  • Zuletzt bearbeitet 02.10.2026 13:39:23

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)