Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

TI-2026-62963 CVE-2026-93385 · GHSA-7vm4-83jx-7xj7

Information disclosure in Google Chrome

Priority LOW 29

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00312 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-200
TI-2026-62956 CVE-2026-93378 · GHSA-6ccj-rr2j-jjg4

Missing authorization in Google Chrome

Priority LOW 15

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00216 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-862
TI-2026-62954 CVE-2026-93376 · GHSA-8qh9-fmcv-7vc2

Out-of-bounds read in Google Chrome

Priority LOW 27

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00112 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-125
TI-2026-62961 CVE-2026-93383 · GHSA-q46p-p7rr-g3x9

Information disclosure in Google Chrome

Priority LOW 20

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00254 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-200
TI-2026-62962 CVE-2026-93384 · GHSA-2rm2-m6g7-5v7j

Server-side request forgery in Google Chrome

Priority LOW 17

Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00245 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-918
Priority LOW 15

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.002 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-367
TI-2026-62955 CVE-2026-93377 · GHSA-7w5f-8qxv-hch4

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00436 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-843
TI-2026-62957 CVE-2026-93379 · GHSA-pj82-h28q-g9w3

Incorrect authorization in Google Chrome

Priority LOW 20

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00252 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-863
TI-2026-62959 CVE-2026-93381 · GHSA-xjgp-95jm-jggm

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 40

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00386 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-122
TI-2026-62951 CVE-2026-93373 · GHSA-62gf-3r56-8cx8

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00331 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-416
Priority LOW 20

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00254 Published 2026-09-17 Partial fix · 153.0.8010.52 CWE-754
TI-2026-62960 CVE-2026-93382 · GHSA-wwwf-28wj-4xfg

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00373 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-416
TI-2026-62950 CVE-2026-93372 · GHSA-rwgv-xpmf-2wv3

Stack-based buffer overflow in Google Chrome

Priority MEDIUM 43

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0043 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-121
TI-2026-62952 CVE-2026-93374 · GHSA-xpc9-4mgh-2jj3

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00422 Published 2026-09-17 Fixed in 153.0.8010.52 CWE-416