Google

Chrome

1863 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-11179

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:32
  • Zuletzt bearbeitet 08.06.2026 14:20:23

Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-11175

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:31
  • Zuletzt bearbeitet 08.06.2026 14:21:27

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-11176

  • EPSS 0.18%
  • Veröffentlicht 04.06.2026 23:05:31
  • Zuletzt bearbeitet 08.06.2026 14:21:21

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-11173

  • EPSS 0.28%
  • Veröffentlicht 04.06.2026 23:05:30
  • Zuletzt bearbeitet 05.06.2026 20:45:18

Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

5.3

CVE-2026-11174

  • EPSS 0.21%
  • Veröffentlicht 04.06.2026 23:05:30
  • Zuletzt bearbeitet 08.06.2026 14:21:31

Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

8.1

CVE-2026-11170

  • EPSS 0.24%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 08.06.2026 14:21:47

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

8.8

CVE-2026-11171

  • EPSS 0.28%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 05.06.2026 20:45:30

Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-11172

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:29
  • Zuletzt bearbeitet 08.06.2026 14:21:40

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-11168

  • EPSS 0.23%
  • Veröffentlicht 04.06.2026 23:05:28
  • Zuletzt bearbeitet 08.06.2026 14:22:05

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium s...

8.1

CVE-2026-11169

  • EPSS 0.21%
  • Veröffentlicht 04.06.2026 23:05:28
  • Zuletzt bearbeitet 08.06.2026 14:21:58

Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted XML file. (Chromium security severity: Medium)