Threat database

A missing authorization vulnerability in Google Chrome Extensions prior to version 154.0.8037.57 allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. This vulnerability has a high severity rating and affects Chrome versions before 154.0.8037.57.

CVE-2026-95310 is a critical use-after-free vulnerability in the AdFilter component of Google Chrome prior to version 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. Google has released an update to address this issue.

CVE-2026-95356 is a critical use-after-free vulnerability in the WindowDialog component of Google Chrome prior to version 154.0.8037.57. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability requires user interaction and has a high impact on confidentiality, integrity, and availability.

CVE-2026-95329 is a critical out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android. It affects versions prior to 154.0.8037.57 and could allow a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-95322 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android. It affects versions prior to 154.0.8037.57. A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to execute arbitrary code outside the sandbox. The vulnerability has a high CVSS score of 8.3 and was publicly disclosed on September 29, 2026. Google has released an update to address this issue.

A critical buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

A critical buffer overflow vulnerability exists in the WebGL component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-95313 is a critical use-after-free vulnerability in the Fullscreen feature of Google Chrome versions prior to 154.0.8037.57. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-95339 is a critical use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. Google has released an official fix in Chrome version 154.0.8037.57 to address this issue.

CVE-2026-95357 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android. It affects versions prior to 154.0.8037.57 and could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

A critical buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android versions prior to 154.0.8037.57. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

CVE-2026-81867 is a critical deserialization of untrusted data vulnerability in the JavaScript Task component of Google Cloud Application Integration. It affects versions prior to 2026-06-28 and allows an authenticated user with standard permissions to execute arbitrary code on shared production servers by using a specially crafted script. The vulnerability was patched on June 28, 2026, and no customer action is required.

CVE-2026-19759 is an Incorrect Authorization vulnerability in Google Cloud Application Integration versions prior to 2026-06-17. It allows an authenticated Google Cloud user to execute arbitrary internal RPCs within Google's production network under a privileged identity by exploiting an internal-only task type. This vulnerability was patched on June 17, 2026, and no customer action is required.

CVE-2026-87723 is an untrusted search path vulnerability in Google fuse-archive versions prior to 1.24. An attacker who can manipulate the PATH environment variable or place a malicious binary in a writable directory within PATH can hijack the execution flow to run arbitrary local code with the privileges of the user running fuse-archive. The vulnerability was partially mitigated in version 1.22 and fully fixed in version 1.24 by implementing refined selective PATH filtering.

CVE-2026-96812 is a high-severity vulnerability in Google gVisor affecting Linux platforms with CUSE enabled. It allows a local attacker with container image deployment privileges to achieve root code execution on the host by improperly exposing a /dev/cuse character device node from a container to the host. This exposure enables the attacker to register a host device and exploit unrestricted ioctl handling to overwrite root udev helper memory.

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same process, the module-level token cache fails to key its cached tokens by the requested audience. Consequently, a valid, unexpired token minted for a sensitive service (Service A) can be retrieved from the cache and sent to a secondary service (Service B). An attacker who operates, compromises, or monitors traffic to Service B can capture this token and replay it to impersonate the victim application against Service A.

CVE-2026-93386 is a UI misrepresentation vulnerability in Google Chrome's WebAppInstalls component prior to version 153.0.8010.52. It allows a remote attacker to spoof UI elements via a crafted HTML page, leveraging social engineering. The vulnerability has a medium severity rating with a CVSS score of 5.4. A fix is available in Chrome version 153.0.8010.52.

An information leak vulnerability exists in the Paint component of Google Chrome prior to version 153.0.8010.52. This flaw allows a remote attacker to obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability has a medium severity rating and a CVSS score of 6.5. A fix is available in Chrome version 153.0.8010.52.