Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

32 records

TI-2026-65352 CVE-2026-102330 · GHSA-vv45-qw3h-rvwh

Incorrect authorization in Google Chrome

Priority LOW 28

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00234 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-863
TI-2026-65349 CVE-2026-102327 · GHSA-gj79-x7w9-xc49

Incorrect authorization in Google Chrome

Priority LOW 35

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00274 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-863
TI-2026-65333 CVE-2026-102310 · GHSA-gpgp-6mmr-5hc6

Missing authorization in Google Chrome

Priority LOW 28

Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00244 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-862
TI-2026-65343 CVE-2026-102320 · GHSA-2p5m-j2xr-3qh8

Missing authorization in Google Chrome

Priority LOW 28

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00234 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-862
TI-2026-65344 CVE-2026-102321 · GHSA-hvww-xr4r-2f2g

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00339 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-843
TI-2026-65325 CVE-2026-102302 · GHSA-9x63-2qqh-fp92

Stack-based buffer overflow in Google Chrome

Priority MEDIUM 40

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00355 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-121
Priority LOW 16

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.00214 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-908
TI-2026-65351 CVE-2026-102329 · GHSA-3xvj-7hwp-28hh

Cross-site scripting in Google Chrome

Priority LOW 26

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00178 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-79
TI-2026-65341 CVE-2026-102318 · GHSA-88g8-6wv7-cfp4

Out-of-bounds read in Google Chrome

Priority LOW 21

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00214 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-125
TI-2026-65346 CVE-2026-102324 · GHSA-mv2g-mx4w-64j3

Use after free in Google Chrome

Priority LOW 38

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML p…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00269 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-416
Priority LOW 16

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.00214 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-908
TI-2026-65324 CVE-2026-102301 · GHSA-86cv-mpfj-pq59

Out-of-bounds write in Google Chrome

Priority LOW 38

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00286 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-787
TI-2026-65331 CVE-2026-102308 · GHSA-3qr6-vrrv-wjp4

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00317 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-416
Priority LOW 20

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00234 Published 2026-09-29 Partial fix · 154.0.8037.92 CWE-908
TI-2026-65332 CVE-2026-102309 · GHSA-jvcr-f7jv-xq3j

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00317 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-416
TI-2026-65350 CVE-2026-102328 · GHSA-pm2f-26p8-mcc2

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00332 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-843
TI-2026-65327 CVE-2026-102304 · GHSA-pwg7-8p3h-r4rj

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00317 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-416
TI-2026-65339 CVE-2026-102316 · GHSA-fcf3-fgrp-9hp7

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00311 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-416
TI-2026-65348 CVE-2026-102326 · GHSA-f5fp-62g2-jm9q

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00325 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-843
Priority LOW 20

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00277 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-908
Priority LOW 16

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.00254 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-908
Priority LOW 20

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00277 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-908
TI-2026-65345 CVE-2026-102323 · GHSA-2r8w-3fqq-9r8v

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00415 Published 2026-09-29 Fixed in 154.0.8037.92 CWE-843
Load more