Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-21038
Medium · 5.5
CWE-125 Jun 5, 2026
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0...
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.
CVE-2026-11301
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)
CVE-2026-11299
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11279
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11256
High · 8.3
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11191
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11183
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)
CVE-2026-11160
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11111
High · 8.1
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11096
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11091
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11077
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11075
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11061
Critical · 9.6
CWE-125 Jun 4, 2026
Google Chrome ANGLE Type Confusion Allowing Possible Sandbox Escape (CVE-2026-11061)
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11051
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11015
High · 8.1
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11006
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11005
Medium · 5.3
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11004
Medium · 5.3
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-10998
Medium · 4.0
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-10985
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10979
Medium · 6.5
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10941
High · 8.8
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10930
High · 8.1
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10927
High · 8.3
CWE-125 Jun 4, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)