3471 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2026-91728
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-190 1 PoC

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11061
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-125 1 PoC

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79282
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-87470
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-1284 1 PoC

Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106417
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-190 1 PoC

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17656
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-106401
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-787 1 PoC

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-19175
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-17721
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-787 1 PoC

Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-17710
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11100
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79131
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-787 1 PoC

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13775
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 CWE-416 1 PoC

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-78900
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-20 1 PoC

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79189
Chrome General
9.6
CRITICAL
EPSS
0.4%
2026 CWE-787 1 PoC

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-6296
Chrome General
9.6
CRITICAL
EPSS
0.6%
2026 CWE-122 1 PoC

Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-14101
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17704
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-416 1 PoC

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-17701
Chrome General
9.6
CRITICAL
EPSS
0.5%
2026 CWE-125 1 PoC

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13909
Chrome General
9.6
CRITICAL
EPSS
0.3%
2026 1 PoC

Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)