|
841
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
New
|
CWE-416
Use After Free
|
CVE-2026-10002
|
2026-05-30 02:40 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
842
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity:…
New
|
CWE-20 NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-10004
|
2026-05-30 02:39 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
843
|
7.5 |
HIGH
Network
|
google
|
chrome
|
Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
New
|
CWE-362
Race Condition
|
CVE-2026-10006
|
2026-05-30 02:18 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
844
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-9880
|
2026-05-30 02:17 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
845
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch…
New
|
CWE-416
Use After Free
|
CVE-2026-10012
|
2026-05-30 02:17 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
846
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pa…
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-9926
|
2026-05-30 02:16 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
847
|
9.0 |
CRITICAL
Network
|
google
|
chrome
|
Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome E…
New
|
CWE-416
Use After Free
|
CVE-2026-9891
|
2026-05-30 02:15 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
848
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C…
New
|
CWE-416
Use After Free
|
CVE-2026-9925
|
2026-05-30 02:14 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
849
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Me…
New
|
CWE-20 NVD-CWE-noinfo
Improper Input Validation
|
CVE-2026-10021
|
2026-05-30 02:13 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
850
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H…
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-9939
|
2026-05-30 02:13 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|