Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.3

CVE-2026-95381

  • EPSS 0.4%
  • Veröffentlicht 29.09.2026 17:31:44
  • Zuletzt bearbeitet 02.10.2026 15:12:59

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sev...

6.5

CVE-2026-95382

  • EPSS 0.28%
  • Veröffentlicht 29.09.2026 17:31:44
  • Zuletzt bearbeitet 02.10.2026 15:12:44

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security ...

9.6

CVE-2026-95299

  • EPSS 0.46%
  • Veröffentlicht 29.09.2026 17:31:43
  • Zuletzt bearbeitet 30.09.2026 19:52:52

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-95304

  • EPSS 0.41%
  • Veröffentlicht 29.09.2026 17:31:43
  • Zuletzt bearbeitet 30.09.2026 19:51:21

Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-95306

  • EPSS 0.45%
  • Veröffentlicht 29.09.2026 17:31:43
  • Zuletzt bearbeitet 30.09.2026 20:18:04

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-95351

  • EPSS 0.41%
  • Veröffentlicht 29.09.2026 17:31:43
  • Zuletzt bearbeitet 30.09.2026 16:26:49

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

7.5

CVE-2026-95280

  • EPSS 0.29%
  • Veröffentlicht 29.09.2026 17:31:42
  • Zuletzt bearbeitet 30.09.2026 16:31:27

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-95286

  • EPSS 0.45%
  • Veröffentlicht 29.09.2026 17:31:42
  • Zuletzt bearbeitet 30.09.2026 16:30:42

Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-95343

  • EPSS 0.52%
  • Veröffentlicht 29.09.2026 17:31:42
  • Zuletzt bearbeitet 30.09.2026 16:27:20

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-95365

  • EPSS 0.4%
  • Veröffentlicht 29.09.2026 17:31:42
  • Zuletzt bearbeitet 01.10.2026 13:56:59

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)