CVE-2026-11108
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:59
- Zuletzt bearbeitet 08.06.2026 14:44:49
Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11104
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:58
- Zuletzt bearbeitet 08.06.2026 19:16:36
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity...
CVE-2026-11105
- EPSS 0.24%
- Veröffentlicht 04.06.2026 23:04:58
- Zuletzt bearbeitet 08.06.2026 19:16:36
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11106
- EPSS 0.19%
- Veröffentlicht 04.06.2026 23:04:58
- Zuletzt bearbeitet 08.06.2026 14:45:11
Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11102
- EPSS 0.39%
- Veröffentlicht 04.06.2026 23:04:57
- Zuletzt bearbeitet 06.06.2026 04:17:26
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)
CVE-2026-11103
- EPSS 0.08%
- Veröffentlicht 04.06.2026 23:04:57
- Zuletzt bearbeitet 08.06.2026 14:45:42
Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-11100
- EPSS 0.26%
- Veröffentlicht 04.06.2026 23:04:56
- Zuletzt bearbeitet 09.06.2026 03:06:28
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity:...
CVE-2026-11101
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:56
- Zuletzt bearbeitet 08.06.2026 19:16:36
Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11097
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:55
- Zuletzt bearbeitet 09.06.2026 03:07:23
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11098
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:55
- Zuletzt bearbeitet 09.06.2026 03:07:11
Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)