Priority LOW 38
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page…
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00324 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-20
Priority LOW 35
Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00527 · Published 2026-08-06 · Partial fix · 151.0.7922.109 CWE-416
Priority MEDIUM 43
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00345 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority MEDIUM 40
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00413 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-190
Priority LOW 38
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00342 · Published 2026-08-06 · Partial fix · 151.0.7922.109 CWE-787
Priority MEDIUM 43
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00345 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 15
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.0023 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-190
Priority MEDIUM 43
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00393 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 34
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00266 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority MEDIUM 43
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00345 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-20
Priority LOW 38
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority MEDIUM 40
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00413 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-787
Priority LOW 15
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00338 · Published 2026-08-06 · Partial fix · 151.0.7922.109 CWE-457
Priority LOW 15
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00399 · Published 2026-08-06 · Partial fix · 151.0.7922.109 CWE-457
Priority LOW 35
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 35
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 34
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.0025 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-122
Priority LOW 38
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 37
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00329 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-20
Priority LOW 38
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-693
Priority MEDIUM 40
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00413 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority MEDIUM 40
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00413 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-693
Priority LOW 38
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-787
Priority LOW 38
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00304 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-416
Priority LOW 24
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafte…
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00308 · Published 2026-08-06 · Fixed in 151.0.7922.109 CWE-457
Load more