CVE Database

CVE-2026-11120 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome Enterprise Reporting Input Validation Sandbox Escape

Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11119 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome for Android GPU sandbox escape via crafted HTML

Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11113 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome ANGLE Input Validation Flaw Enabling Possible Sandbox Escape

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11112 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome Chromoting Input Validation Flaw Enabling Sandbox Escape on Linux

Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11105 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11098 Medium · 5.3 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11095 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome Codecs improper input validation with possible sandbox escape

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11093 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11086 High · 8.8 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11079 High · 8.8 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory write via a crafted video file. (Chromium security severity: Medium)

CVE-2026-11078 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11070 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome Chromoting Input Validation Flaw Enabling Sandbox Escape

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11069 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11066 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome ANGLE Input Validation Flaw Enabling Possible Sandbox Escape

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11063 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome WebNN Input Validation Flaw Enabling Sandbox Escape

Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11056 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome SiteIsolation Sandbox Escape via Insufficient Input Validation

Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11047 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome on Windows: Sandbox Escape in Base Component

Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11046 High · 8.8 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11045 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11041 High · 8.8 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11038 Medium · 6.5 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11035 High · 7.3 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a crafted XML file. (Chromium security severity: Medium)

CVE-2026-11034 Medium · 6.1 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11031 Medium · 4.3 CWE-20 Jun 4, 2026

Improper Input Validation in Google Chrome

Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11029 Critical · 9.6 CWE-20 Jun 4, 2026

Google Chrome for Android: drag-and-drop input validation flaw enabling sandbox escape

Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)