CVE-2026-5291
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:37
- Zuletzt bearbeitet 01.04.2026 16:40:46
Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-5292
- EPSS 0.02%
- Veröffentlicht 01.04.2026 04:41:37
- Zuletzt bearbeitet 01.04.2026 17:07:20
Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-5288
- EPSS 0.02%
- Veröffentlicht 01.04.2026 04:41:36
- Zuletzt bearbeitet 01.04.2026 16:41:09
Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5289
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:36
- Zuletzt bearbeitet 01.04.2026 16:40:59
Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5290
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:36
- Zuletzt bearbeitet 01.04.2026 16:40:52
Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5273
- EPSS 0.02%
- Veröffentlicht 01.04.2026 04:41:35
- Zuletzt bearbeitet 01.04.2026 16:36:13
Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5286
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:35
- Zuletzt bearbeitet 01.04.2026 17:08:31
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5287
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:35
- Zuletzt bearbeitet 02.04.2026 00:16:24
Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-5284
- EPSS 0.03%
- Veröffentlicht 01.04.2026 04:41:34
- Zuletzt bearbeitet 01.04.2026 17:09:14
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-5285
- EPSS 0.02%
- Veröffentlicht 01.04.2026 04:41:34
- Zuletzt bearbeitet 02.04.2026 00:16:24
Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)