Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-91745

  • EPSS 0.25%
  • Veröffentlicht 15.09.2026 20:41:33
  • Zuletzt bearbeitet 17.09.2026 18:47:44

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-91710

  • EPSS 0.24%
  • Veröffentlicht 15.09.2026 20:41:32
  • Zuletzt bearbeitet 17.09.2026 13:37:36

Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-91716

  • EPSS 0.24%
  • Veröffentlicht 15.09.2026 20:41:32
  • Zuletzt bearbeitet 17.09.2026 13:38:17

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-91718

  • EPSS 0.24%
  • Veröffentlicht 15.09.2026 20:41:32
  • Zuletzt bearbeitet 17.09.2026 13:38:40

Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-91746

  • EPSS 0.2%
  • Veröffentlicht 15.09.2026 20:41:32
  • Zuletzt bearbeitet 17.09.2026 18:47:31

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

3.1

CVE-2026-91708

  • EPSS 0.15%
  • Veröffentlicht 15.09.2026 20:41:31
  • Zuletzt bearbeitet 17.09.2026 13:37:16

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

5.1

CVE-2026-91717

  • EPSS 0.08%
  • Veröffentlicht 15.09.2026 20:41:31
  • Zuletzt bearbeitet 17.09.2026 13:38:33

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)

8.3

CVE-2026-91735

  • EPSS 0.29%
  • Veröffentlicht 15.09.2026 20:41:31
  • Zuletzt bearbeitet 17.09.2026 16:03:04

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity...

8.8

CVE-2026-91736

  • EPSS 0.3%
  • Veröffentlicht 15.09.2026 20:41:31
  • Zuletzt bearbeitet 17.09.2026 16:02:50

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2026-91740

  • EPSS 0.22%
  • Veröffentlicht 15.09.2026 20:41:31
  • Zuletzt bearbeitet 17.09.2026 18:48:46

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)