3471 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2026-14017
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87470
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-1284 1 PoC

Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79131
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-787 1 PoC

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13775
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-17710
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11100
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11131
Chrome General
9.6
CRITICAL
EPSS
0.2%
2026 CWE-416 1 PoC

Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-17656
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-106401
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-787 1 PoC

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-17652
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-91749
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-416 1 PoC

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79282
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-18015
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11095
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-20 1 PoC

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79047
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-416 1 PoC

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79078
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79149
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-14101
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79189
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-787 1 PoC

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79290
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)