Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

41 records

TI-2026-15663 CVE-2026-19177 · GHSA-fcm2-mhcw-725j

Improper input validation in Google Chrome

Priority LOW 38

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00324 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-20
TI-2026-15662 CVE-2026-19176 · GHSA-4q2q-m4q6-9jr6

Use after free in Google Chrome

Priority LOW 35

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00527 Published 2026-08-06 Partial fix · 151.0.7922.109 CWE-416
TI-2026-15661 CVE-2026-19175 · GHSA-25g9-fmc9-9m6p

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15660 CVE-2026-19174 · GHSA-vc67-62qr-jvwf

Integer overflow in Google Chrome

Priority MEDIUM 40

Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-190
TI-2026-15659 CVE-2026-19173 · GHSA-fg55-p4v2-8v56

Out-of-bounds write in Google Chrome

Priority LOW 38

Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00342 Published 2026-08-06 Partial fix · 151.0.7922.109 CWE-787
TI-2026-15657 CVE-2026-19171 · GHSA-j855-4985-fgj7

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15653 CVE-2026-19167 · GHSA-q7v3-32hw-67w6

Integer overflow in Google Chrome

Priority LOW 15

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0023 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-190
TI-2026-15652 CVE-2026-19166 · GHSA-wvq2-h5rv-752w

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00393 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15651 CVE-2026-19165 · GHSA-2865-9gvm-5wwx

Use after free in Google Chrome

Priority LOW 34

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00266 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15650 CVE-2026-19164 · GHSA-mh4h-c4w6-m987

Improper input validation in Google Chrome

Priority MEDIUM 43

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-20
TI-2026-15649 CVE-2026-19163 · GHSA-m348-r3cc-4chm

Use after free in Google Chrome

Priority LOW 38

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15648 CVE-2026-19162 · GHSA-xc4c-849c-886m

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-787
TI-2026-15645 CVE-2026-19159 · GHSA-8w2j-h45m-25mf

Use after free in Google Chrome

Priority LOW 35

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15644 CVE-2026-19158 · GHSA-49ff-8x5v-9f8c

Use after free in Google Chrome

Priority LOW 35

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15642 CVE-2026-19156 · GHSA-2w9g-53qp-p3g5

Heap-based buffer overflow in Google Chrome

Priority LOW 34

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0025 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-122
TI-2026-15641 CVE-2026-19155 · GHSA-qh77-m293-98r7

Use after free in Google Chrome

Priority LOW 38

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
TI-2026-15639 CVE-2026-19153 · GHSA-2pjc-wr33-2rrg

Improper input validation in Google Chrome

Priority LOW 37

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00329 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-20
Priority LOW 38

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-693
TI-2026-15637 CVE-2026-19151 · GHSA-wmf9-8jqm-79p6

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
Priority MEDIUM 40

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-693
TI-2026-15634 CVE-2026-19148 · GHSA-v897-9v5f-fm5j

Out-of-bounds write in Google Chrome

Priority LOW 38

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-787
TI-2026-15633 CVE-2026-19147 · GHSA-rx36-fm6w-x79j

Use after free in Google Chrome

Priority LOW 38

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00304 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-416
Priority LOW 24

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafte…

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00308 Published 2026-08-06 Fixed in 151.0.7922.109 CWE-457
Load more