|
1111
|
6.3 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in Canvas in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
New
|
CWE-269
Improper Privilege Management
|
CVE-2026-7977
|
2026-05-7 08:24 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1112
|
8.1 |
HIGH
Network
|
google
|
chrome
|
Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium se…
New
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-7978
|
2026-05-7 08:23 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1113
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
New
|
NVD-CWE-noinfo
|
CVE-2026-7979
|
2026-05-7 08:23 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1114
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
New
|
CWE-416
Use After Free
|
CVE-2026-7980
|
2026-05-7 08:23 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1115
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium sec…
New
|
CWE-457
Use of Uninitialized Variable
|
CVE-2026-7982
|
2026-05-7 08:22 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1116
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-7983
|
2026-05-7 08:21 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1117
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML …
New
|
CWE-416
Use After Free
|
CVE-2026-7984
|
2026-05-7 08:21 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1118
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro…
New
|
CWE-416
Use After Free
|
CVE-2026-7985
|
2026-05-7 08:21 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1119
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
New
|
CWE-346
Origin Validation Error
|
CVE-2026-7986
|
2026-05-7 08:21 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1120
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
New
|
CWE-416
Use After Free
|
CVE-2026-7987
|
2026-05-7 08:20 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|