CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

3.462 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-11147 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11144 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: Medium)
CVE-2026-11136 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11131 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome for Android Autofill Use-After-Free Sandbox Escape
Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11130 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11125 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11118 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11117 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11116 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-11115 High · 7.3 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-11114 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome Use After Free in Device Trust on macOS (CVE-2026-11114)
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11100 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome Use-After-Free in File Input on Mac
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11094 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome Use-After-Free in Codecs Component on Windows
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11082 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome for Android GPU race condition enabling possible sandbox escape
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11080 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11074 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11073 Medium · 6.5 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11072 High · 7.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium)
CVE-2026-11071 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11068 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11065 Critical · 9.6 CWE-416 Jun 4, 2026
Google Chrome ANGLE use-after-free enabling possible sandbox escape
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11060 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11059 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11055 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11054 High · 8.8 CWE-416 Jun 4, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)