Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2026-87634

  • EPSS 0.4%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

5.4

CVE-2026-87653

  • EPSS 0.19%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 09.09.2026 20:28:58

UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-87455

  • EPSS 0.42%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 10.09.2026 04:18:19

Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87528

Exploit
  • EPSS 0.35%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 10.09.2026 04:18:24

Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-87566

  • EPSS 0.22%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 09.09.2026 19:18:03

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87591

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 11.09.2026 14:14:17

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

6.5

CVE-2026-87623

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 09.09.2026 17:28:10

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87638

  • EPSS 0.32%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87470

  • EPSS 0.4%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:20

Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87529

  • EPSS 0.46%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:24

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)