Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-13845
High · 8.8
CWE-416 Jun 30, 2026
Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13844
High · 7.8
CWE-416 Jun 30, 2026
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local...
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
CVE-2026-13832
High · 8.3
CWE-416 Jun 30, 2026
Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13831
High · 7.5
CWE-416 Jun 30, 2026
Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote...
Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13830
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)
CVE-2026-13827
High · 7.8
CWE-416 Jun 30, 2026
Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...
Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
CVE-2026-13823
High · 8.3
CWE-416 Jun 30, 2026
Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...
Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13821
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13815
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13814
High · 7.5
CWE-416 Jun 30, 2026
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13811
High · 8.8
CWE-416 Jun 30, 2026
Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13807
High · 7.5
CWE-416 Jun 30, 2026
Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker...
Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. (Chromium security severity: High)
CVE-2026-13805
High · 8.8
CWE-416 Jun 30, 2026
Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13804
High · 8.3
CWE-416 Jun 30, 2026
Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...
Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13802
High · 7.5
CWE-416 Jun 30, 2026
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13799
High · 8.1
CWE-416 Jun 30, 2026
Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)
CVE-2026-13792
Critical · 9.6
CWE-416 Jun 30, 2026
Google Chrome on macOS: Use-After-Free in Touch Bar Enables Possible Sandbox Escape
Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13789
Critical · 9.6
CWE-416 Jun 30, 2026
Google Chrome GPU Use-After-Free with Possible Sandbox Escape (CVE-2026-13789)
Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13788
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13787
High · 8.1
CWE-416 Jun 30, 2026
Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...
Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)
CVE-2026-13786
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13785
Critical · 9.6
CWE-416 Jun 30, 2026
Google Chrome for Mac: Bluetooth use-after-free enabling possible sandbox escape
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13784
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13783
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13782
Critical · 10.0
CWE-416 Jun 30, 2026
Google Chrome Browser Use-After-Free Enabling Sandbox Escape
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)