Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: Google Chrome 154.0.8037.97 Clear all filters
TI-2026-66028 CVE-2026-103627 · GHSA-852g-85fm-88pg

Information disclosure in Google Chrome

Priority LOW 30

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00247 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-200
TI-2026-66032 CVE-2026-103631 · GHSA-cj2x-hj5c-4f82

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 40

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-122
TI-2026-66024 CVE-2026-103623 · GHSA-xfgv-72w2-fx82

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00303 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-416
TI-2026-66023 CVE-2026-103622 · GHSA-hq65-vvqm-xv4r

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-416
TI-2026-66030 CVE-2026-103629 · GHSA-f6x2-c3qc-93q9

Integer overflow in Google Chrome

Priority LOW 19

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00202 Published 2026-10-02 Partial fix · 154.0.8037.97 CWE-190
TI-2026-66025 CVE-2026-103624 · GHSA-2m7j-rg95-qgh4

Use after free in Google Chrome

Priority LOW 38

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00284 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-416
TI-2026-66026 CVE-2026-103625 · GHSA-28xg-w882-xvjx

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00324 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-843
TI-2026-66031 CVE-2026-103630 · GHSA-m4rg-hrvv-hwc6

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00325 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-416
TI-2026-66022 CVE-2026-103621 · GHSA-wm39-rhjr-c7cr

Integer overflow in Google Chrome

Priority LOW 19

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00202 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-190
TI-2026-66027 CVE-2026-103626 · GHSA-7q6f-h37m-rrqf

Incorrect authorization in Google Chrome

Priority MEDIUM 43

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00326 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-863
TI-2026-66029 CVE-2026-103628 · GHSA-cwqc-mg62-f9v2

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00378 Published 2026-10-02 Fixed in 154.0.8037.97 CWE-787