Threat database

Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability exists in the compositing component of Google Chrome prior to version 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The vulnerability has a high severity rating and has been fixed in version 157.0.8103.38.

A type confusion vulnerability in the V8 engine of Google Chrome prior to version 157.0.8103.38 allows remote attackers to execute arbitrary code within the sandbox by delivering a crafted HTML page. This vulnerability has a high severity rating and has been fixed in Chrome version 157.0.8103.38.

A buffer overflow vulnerability exists in PDFium within Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by using a specially crafted PDF file. The issue has been fixed in version 157.0.8103.38.

Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A buffer overflow vulnerability exists in the Media component of Google Chrome prior to version 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating and has been fixed in version 157.0.8103.38.

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

An uninitialized resource vulnerability in the Dawn component of Google Chrome on Mac prior to version 157.0.8103.38 allows a remote attacker to read memory outside the sandbox via a crafted HTML page. This issue has been fixed in version 157.0.8103.38.

CVE-2026-121071 is a critical security vulnerability in Google Chrome's FileSystem component prior to version 157.0.8103.38. It involves incorrect authorization that allows a remote attacker, through social engineering and a crafted HTML page, to potentially execute arbitrary code outside the browser sandbox. The vulnerability has been fixed in Chrome version 157.0.8103.38.

A high-severity vulnerability in Google Chrome's WebGL component prior to version 157.0.8103.38 allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. This flaw has been fixed in version 157.0.8103.38.

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A vulnerability in Google Chrome's WebGL component prior to version 157.0.8103.38 allows remote attackers to read memory outside the sandbox via a crafted HTML page. This issue is classified with high severity by Chromium security.

A high-severity memory corruption vulnerability exists in the GPU component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.38.

A high-severity vulnerability (CVE-2026-121098) in Google Chrome prior to version 157.0.8103.38 involves improper state validation in the GPU component. This flaw allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The issue was fixed in Chrome version 157.0.8103.38.