Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-10922 — Google Chrome DevTools Same-Origin Policy Bypass

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin p…

chrome chrome | Remote | Misconfiguration
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10921 — Google Chrome Dawn Integer Overflow Sandbox Escape

Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10920 — Google Chrome Sandbox Escape

Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…

chrome macos chrome | Remote | Misconfiguration
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10919 — ANGLE Use-After-Free Sandbox Escape

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10918 — Google Chrome Viz Use After Free Sandbox Escape

Use after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10917 — Chrome Media Sandbox Escape

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape …

linux_kernel chrome macos chrome windows | Remote | Information Disclosure
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
0.0 NA
CVE-2026-10916 — Chrome DevTools UXSS

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to inject arbitrary scripts or HTML (…

chrome chrome | Cross-Site Scripting
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10915 — Google Chrome Use-After-Free Sandbox Escape

Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10914 — ANGLE Use-After-Free Remote Code Execution

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10913 — ANGLE Use-After-Free Vulnerability

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
0.0 NA
CVE-2026-10912 — Google Chrome: Same Origin Policy Bypass via Malicious HTML

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a …

chrome chrome | Authorization
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10911 — Google Chrome Media Sandbox Escape

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape …

chrome chrome | Remote | Misconfiguration
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10910 — Google Chrome V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10909 — Google Chrome Use-After-Free Sandbox Escape

Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10908 — Google Chrome Use-After-Free Sandbox Escape

Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10907 — ANGLE Heap Corruption

Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
7.5 HIGH
CVE-2026-10906 — Google Chrome WebAuthentication Use-After-Free

Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10905 — Google Chrome Use After Free in Network

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10904 — Google Chrome V8 Sandbox Escape

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10903 — Google Chrome Use-After-Free

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
Showing 20 of 7273 Results