Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

TI-2026-11092 CVE-2026-13037 · GHSA-7898-6x7p-pr8g

Use after free in Google Chrome

Priority LOW 35

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00147 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
Priority MEDIUM 40

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00383 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11090 CVE-2026-13035 · GHSA-r2jr-m2rh-f5hg

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00353 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11089 CVE-2026-13034 · GHSA-3pfj-fj4c-9hh9

Origin validation error in Google Chrome

Priority LOW 21

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00204 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-346
TI-2026-11086 CVE-2026-13031 · GHSA-f88h-fjvm-fgph

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00383 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11084 CVE-2026-13029 · GHSA-p9w8-5hg8-pp9p

Use after free in Google Chrome

Priority LOW 34

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extensio…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00246 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11082 CVE-2026-13027 · GHSA-4mp6-2r26-5pw4

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11081 CVE-2026-13026 · GHSA-mmm9-39xr-fcc3

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11080 CVE-2026-13025 · GHSA-jw4x-8999-54r8

Improper input validation in Google Chrome

Priority LOW 38

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00302 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-20
TI-2026-11079 CVE-2026-13024 · GHSA-32q7-rqp9-688w

Improper input validation in Google Chrome

Priority LOW 19

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00225 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-20
Priority LOW 24

Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page…

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00288 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-457
TI-2026-11077 CVE-2026-13022 · GHSA-3mjj-7mcj-gxwq

Origin validation error in Google Chrome

Priority LOW 28

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00196 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-346
TI-2026-11076 CVE-2026-13021 · GHSA-xrw9-98j7-cc8w

Origin validation error in Google Chrome

Priority LOW 19

Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00204 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-346
TI-2026-11093 CVE-2026-13038 · GHSA-wc22-hpjh-8x75

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00383 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
Priority MEDIUM 40

Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00383 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-125
TI-2026-11087 CVE-2026-13032 · GHSA-37jm-qcw2-gcqg

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416
TI-2026-11083 CVE-2026-13028 · GHSA-cc6x-3gf8-2x53

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-06-24 Fixed in 149.0.7827.197 CWE-416