Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-11147
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11144
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: Medium)
CVE-2026-11136
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11131
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome for Android Autofill Use-After-Free Sandbox Escape
Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11130
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11125
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11118
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11117
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11116
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-11115
High · 7.3
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-11114
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome Use After Free in Device Trust on macOS (CVE-2026-11114)
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11100
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome Use-After-Free in File Input on Mac
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11094
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome Use-After-Free in Codecs Component on Windows
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11082
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome for Android GPU race condition enabling possible sandbox escape
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11080
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11074
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11073
Medium · 6.5
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11072
High · 7.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium)
CVE-2026-11071
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11068
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11065
Critical · 9.6
CWE-416 Jun 4, 2026
Google Chrome ANGLE use-after-free enabling possible sandbox escape
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11060
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11059
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11055
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11054
High · 8.8
CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)