CVE-2026-11095
- EPSS 0.28%
- Veröffentlicht 04.06.2026 23:04:54
- Zuletzt bearbeitet 05.06.2026 20:27:11
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi...
CVE-2026-11096
- EPSS 0.24%
- Veröffentlicht 04.06.2026 23:04:54
- Zuletzt bearbeitet 09.06.2026 03:07:34
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11092
- EPSS 0.18%
- Veröffentlicht 04.06.2026 23:04:53
- Zuletzt bearbeitet 08.06.2026 14:34:10
Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity:...
CVE-2026-11093
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:53
- Zuletzt bearbeitet 08.06.2026 15:51:08
Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11094
- EPSS 0.23%
- Veröffentlicht 04.06.2026 23:04:53
- Zuletzt bearbeitet 08.06.2026 15:51:00
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11090
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:52
- Zuletzt bearbeitet 08.06.2026 14:34:38
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11091
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:52
- Zuletzt bearbeitet 08.06.2026 14:34:26
Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11087
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:51
- Zuletzt bearbeitet 08.06.2026 14:35:02
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11088
- EPSS 0.32%
- Veröffentlicht 04.06.2026 23:04:51
- Zuletzt bearbeitet 05.06.2026 20:27:23
Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11089
- EPSS 0.25%
- Veröffentlicht 04.06.2026 23:04:51
- Zuletzt bearbeitet 08.06.2026 14:34:48
Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity...