Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2026-87552

  • EPSS 0.15%
  • Veröffentlicht 09.09.2026 00:09:36
  • Zuletzt bearbeitet 10.09.2026 16:18:05

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)

4.3

CVE-2026-87564

  • EPSS 0.27%
  • Veröffentlicht 09.09.2026 00:09:36
  • Zuletzt bearbeitet 09.09.2026 20:20:58

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-87587

  • EPSS 0.3%
  • Veröffentlicht 09.09.2026 00:09:36
  • Zuletzt bearbeitet 10.09.2026 04:18:27

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-87639

Medienbericht
  • EPSS 0.37%
  • Veröffentlicht 09.09.2026 00:09:36
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: ...

4.3

CVE-2026-87651

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:36
  • Zuletzt bearbeitet 09.09.2026 17:28:33

Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-87460

  • EPSS 0.3%
  • Veröffentlicht 09.09.2026 00:09:35
  • Zuletzt bearbeitet 10.09.2026 04:18:19

Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-87500

  • EPSS 0.34%
  • Veröffentlicht 09.09.2026 00:09:35
  • Zuletzt bearbeitet 10.09.2026 04:18:22

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2026-87542

  • EPSS 0.3%
  • Veröffentlicht 09.09.2026 00:09:35
  • Zuletzt bearbeitet 10.09.2026 04:18:25

Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.3

CVE-2026-87572

  • EPSS 0.31%
  • Veröffentlicht 09.09.2026 00:09:35
  • Zuletzt bearbeitet 10.09.2026 04:18:26

Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9.6

CVE-2026-87646

  • EPSS 0.36%
  • Veröffentlicht 09.09.2026 00:09:35
  • Zuletzt bearbeitet 10.09.2026 04:18:31

Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)