Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

151 records

TI-2026-08783 CVE-2026-10022 · GHSA-rxxm-p26x-j53p

Type confusion in Google Chrome

Priority LOW 34

Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00151 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-843
TI-2026-08782 CVE-2026-10021 · GHSA-4jm4-gh3x-cq86

Improper input validation in Google Chrome

Priority MEDIUM 40

Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00234 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-20
TI-2026-08781 CVE-2026-10020 · GHSA-w93m-f8fx-95gr

Improper input validation in Google Chrome

Priority LOW 37

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00198 Published 2026-05-28 Partial fix · 148.0.7778.216 CWE-20
TI-2026-08778 CVE-2026-10017 · GHSA-8rpv-xx2v-w955

Out-of-bounds read in Google Chrome

Priority LOW 37

Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00185 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-125
TI-2026-08777 CVE-2026-10016 · GHSA-hg84-96ph-3rr9

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08775 CVE-2026-10014 · GHSA-gm2w-gw5x-592f

Use after free in Google Chrome

Priority LOW 37

Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00185 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08774 CVE-2026-10013 · GHSA-xf9g-pxhx-jg8c

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08773 CVE-2026-10012 · GHSA-rwgc-9q6h-cxwg

Use after free in Google Chrome

Priority LOW 37

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00182 Published 2026-05-28 Partial fix · 148.0.7778.216 CWE-416
TI-2026-08772 CVE-2026-10011 · GHSA-7mc4-mv93-3wr7

Information disclosure in Google Chrome

Priority LOW 14

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00173 Published 2026-05-28 Partial fix · 148.0.7778.216 CWE-200
TI-2026-08771 CVE-2026-10010 · GHSA-9jr4-r64p-fhqf

Origin validation error in Google Chrome

Priority LOW 22

Inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

CVSS 3.1MEDIUM 5.0 Network No auth User interaction EPSS 0.00125 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-346
TI-2026-08768 CVE-2026-10007 · GHSA-gjc7-326g-45pj

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08767 CVE-2026-10006 · GHSA-c58x-vh32-87m5

Race condition in Google Chrome

Priority LOW 34

Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0023 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-362
TI-2026-08766 CVE-2026-10005 · GHSA-p5p5-xjxr-p523

Use after free in Google Chrome

Priority LOW 34

Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00261 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08765 CVE-2026-10004 · GHSA-p337-8mm9-6p6x

Improper input validation in Google Chrome

Priority LOW 28

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00164 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-20
TI-2026-08764 CVE-2026-10003 · GHSA-5f84-9cxm-x8fc

Use after free in Google Chrome

Priority LOW 34

Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00221 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08763 CVE-2026-10002 · GHSA-xcjw-33rw-v8v3

Use after free in Google Chrome

Priority LOW 39

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0018 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08762 CVE-2026-10001 · GHSA-v9fw-r7h8-r3mr

Use after free in Google Chrome

Priority LOW 37

Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00173 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
TI-2026-08761 CVE-2026-10000 · GHSA-94p9-r92m-453h

Use after free in Google Chrome

Priority LOW 37

Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00185 Published 2026-05-28 Fixed in 148.0.7778.216 CWE-416
Priority MEDIUM 40

Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00249 Published 2026-05-28 Partial fix · 148.0.7778.216 CWE-269
Load more