Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2026-13326 CVE-2026-15905 · GHSA-j5rv-8p72-245q

Use after free in Google Chrome

Priority LOW 35

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00137 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416
TI-2026-13325 CVE-2026-15904 · GHSA-7hhh-6c82-7vf3

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00345 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416
TI-2026-13324 CVE-2026-15903 · GHSA-wwqm-cwjr-9577

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-125
TI-2026-13323 CVE-2026-15902 · GHSA-m32c-p2c6-5wh9

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416
TI-2026-13322 CVE-2026-15901 · GHSA-x5x7-mh5c-626x

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416
TI-2026-13321 CVE-2026-15900 · GHSA-fm68-7vm5-9rgw

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416
TI-2026-13320 CVE-2026-15899 · GHSA-w672-5q29-2fg6

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-07-20 Fixed in 150.0.7871.128 CWE-416