Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

TI-2026-04627 CVE-2026-5292 · GHSA-2275-4rpp-82v7

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00318 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-125
TI-2026-04626 CVE-2026-5291 · GHSA-xpj7-w3p4-qj6q

Information disclosure in Google Chrome

Priority LOW 28

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00248 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-200
TI-2026-04625 CVE-2026-5290 · GHSA-3rff-rg87-9c8x

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00318 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04624 CVE-2026-5289 · GHSA-jggq-q9cp-hf4g

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00353 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04623 CVE-2026-5288 · GHSA-hq32-m6cw-6r68

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00318 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04622 CVE-2026-5287 · GHSA-h3rc-fw55-gv3f

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00509 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04608 CVE-2026-5273 · GHSA-9qc6-pp76-5928

Use after free in Google Chrome

Priority LOW 30

Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00358 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04621 CVE-2026-5286 · GHSA-w4gr-836p-x38h

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00392 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04620 CVE-2026-5285 · GHSA-6x6m-xwq4-857w

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.004 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04619 CVE-2026-5284 · GHSA-2739-cxg4-jp3j

Use after free in Google Chrome

Priority LOW 35

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0035 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04618 CVE-2026-5283 · GHSA-vgx9-54r8-82cr

Improper authorization in Google Chrome

Priority LOW 28

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00265 Published 2026-04-01 Partial fix · 146.0.7680.178 CWE-285
Priority MEDIUM 41

Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00561 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-122
TI-2026-04617 CVE-2026-5282 · GHSA-68r5-52qj-jm6w

Out-of-bounds read in Google Chrome

Priority LOW 35

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00247 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-125
TI-2026-04616 CVE-2026-5281 · GHSA-xf76-839h-pfpm

Use after free in Google Chrome

Priority CRITICAL 97KEV

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13743 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04615 CVE-2026-5280 · GHSA-rxr9-x3w7-wrh7

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00392 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
TI-2026-04614 CVE-2026-5279 · GHSA-2q94-wprw-25w4

Buffer overflow in Google Chrome

Priority MEDIUM 40

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00435 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-120
TI-2026-04613 CVE-2026-5278 · GHSA-63vg-wchr-j5wj

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00412 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-416
Priority LOW 35

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00334 Published 2026-04-01 Partial fix · 146.0.7680.178 CWE-472
Priority LOW 28

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00248 Published 2026-04-01 Fixed in 146.0.7680.178 CWE-693
Priority MEDIUM 40

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00448 Published 2026-04-01 Partial fix · 146.0.7680.178 CWE-122