A high-severity vulnerability (CVE-2026-10937) in Google Chrome prior to version 149.0.7827.53 allows a remote attacker to bypass the same origin policy via a crafted HTML page. This issue stems from an inappropriate implementation in the password management component of Chrome. The vulnerability has a CVSS score of 8.1, indicating a significant risk to confidentiality and integrity. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly confirm patch availability or remediation status.
Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-10001 is a use-after-free vulnerability in the PerformanceManager component of Google Chrome versions prior to 148.0.7778.216. This flaw could allow a remote attacker who has compromised the renderer process to potentially escape the browser sandbox by using a specially crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.3. No known exploits in the wild have been reported at this time. The vendor advisory linked indicates a stable channel update addressing this issue, but explicit patch status is not confirmed in the provided data.
CVE-2026-9982 is a high-severity vulnerability in Google Chrome prior to version 148.0.7778.216. It involves insufficient validation of untrusted input in the ANGLE component, which could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This vulnerability has a CVSS score of 8.3, indicating a significant risk. There are no known exploits in the wild at this time. The vendor advisory indicates the issue is addressed in Chrome version 148.0.
CVE-2026-9951 is a use-after-free vulnerability in the UI component of Google Chrome versions prior to 148.0.7778.216. This flaw could allow a remote attacker to potentially escape the browser sandbox by crafting a malicious HTML page. The vulnerability is rated as high severity with a CVSS score of 8.3. No known exploits in the wild have been reported at the time of publication. The vendor advisory linked does not explicitly confirm patch availability or remediation status.
CVE-2026-9914 is a high severity vulnerability in Google Chrome prior to version 148.0.7778.216 involving insufficient validation of untrusted input in the ANGLE component. This flaw could allow a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox by using a specially crafted HTML page. The vulnerability has a CVSS score of 8.3, indicating a significant impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time. The vendor advisory linked does not explicitly confirm the availability of a patch or remediation status.
Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. (Chromium security severity: High)
CVE-2026-9902 is a use-after-free vulnerability in the Accessibility component of Google Chrome versions prior to 148.0.7778.216. This flaw could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox by using a specially crafted HTML page. The vulnerability is rated high severity with a CVSS score of 8.3. There is no explicit patch status provided in the data, and no known exploits in the wild have been reported. The vendor advisory linked should be consulted for the latest remediation information.
CVE-2026-9898 is a high-severity vulnerability in Google Chrome on Android prior to version 148.0.7778.216. It involves insufficient validation of untrusted input in the GPU component, which could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This vulnerability has a CVSS score of 8.3, indicating a significant risk. There is no explicit vendor advisory detail on patch availability or remediation level in the provided data. The vulnerability is not related to a cloud service, and no known exploits in the wild have been reported at this time.
CVE-2026-9896 is a high-severity vulnerability in the V8 JavaScript engine of Google Chrome prior to version 148.0.7778.216. It involves an out-of-bounds write that could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability has a CVSS score of 8.8, indicating a significant risk to confidentiality, integrity, and availability. There are no known exploits in the wild at the time of this report. The vendor advisory linked indicates a stable channel update addressing this issue.
CVE-2026-9889 is a high-severity vulnerability in Google Chrome on Android prior to version 148.0.7778.216. It involves out of bounds read and write errors in the Dawn component, which could allow a remote attacker to perform a sandbox escape by delivering a crafted HTML page. The vulnerability has a CVSS score of 8.3, indicating a significant risk. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly confirm the availability of a patch or remediation status.
CVE-2026-9883 is a use-after-free vulnerability in the Base component of Google Chrome versions prior to 148.0.7778.216. This flaw allows a remote attacker to execute arbitrary code by tricking a user into visiting a crafted HTML page. The vulnerability is rated with a high severity CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. There are no known exploits in the wild at the time of this report. The vendor has published an advisory but has not explicitly stated the remediation status in the provided data.
CVE-2026-9121 is a high-severity vulnerability in Google Chrome prior to version 148.0.7778.179 involving an out-of-bounds read in the GPU component. This flaw could allow a remote attacker to exploit heap corruption by delivering a crafted HTML page. The vulnerability has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at the time of publication. The vendor advisory linked does not explicitly confirm patch availability or remediation status.
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)