Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2026-95347

  • EPSS 0.43%
  • Veröffentlicht 29.09.2026 17:31:54
  • Zuletzt bearbeitet 30.09.2026 16:27:01

Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

3.1

CVE-2026-95312

  • EPSS 0.24%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 16:29:52

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-95321

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 14:57:37

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-95323

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 16:29:01

UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

4.7

CVE-2026-95332

  • EPSS 0.28%
  • Veröffentlicht 29.09.2026 17:31:53
  • Zuletzt bearbeitet 30.09.2026 14:58:56

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-95275

Exploit
  • EPSS 0.25%
  • Veröffentlicht 29.09.2026 17:31:52
  • Zuletzt bearbeitet 02.10.2026 20:11:22

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

4.8

CVE-2026-95300

Exploit
  • EPSS 0.2%
  • Veröffentlicht 29.09.2026 17:31:52
  • Zuletzt bearbeitet 01.10.2026 15:07:09

Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

9.6

CVE-2026-95325

  • EPSS 0.46%
  • Veröffentlicht 29.09.2026 17:31:52
  • Zuletzt bearbeitet 30.09.2026 16:28:25

Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-95374

Exploit
  • EPSS 0.24%
  • Veröffentlicht 29.09.2026 17:31:52
  • Zuletzt bearbeitet 02.10.2026 15:13:32

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-95290

Exploit
  • EPSS 0.2%
  • Veröffentlicht 29.09.2026 17:31:51
  • Zuletzt bearbeitet 01.10.2026 15:07:41

Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)