CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-106423 HIGH · 8.8 Gebruik na gratis in Media in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via… Google
- CVE-2026-106422 MEDIUM · 4.3 Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium… Google
- CVE-2026-106421 HIGH · 8.8 Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-106420 MEDIUM · 5.4 Onjuiste berekening in API in Google Chrome op Windows vóór 155.0.8059.39 stond een externe aanvaller toe om social engineering te gebruiken om UI-elementen te vervalsen… Google Microsoft
- CVE-2026-106419 CRITICAL · 9.6 Gebruik na vrij in HOEK in Google Chrome op Android vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code buiten de sandbox uit te… Google
- CVE-2026-106418 MEDIUM · 6.5 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network… Google
- CVE-2026-106417 CRITICAL · 9.6 Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-106416 MEDIUM · 5.4 Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome… Google
- CVE-2026-106415 MEDIUM · 4.3 Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security… Google
- CVE-2026-106414 CRITICAL · 9.6 Onjuiste invoervalidatie in Mobile in Google Chrome op iOS vóór 155.0.8059.39 stond een externe aanvaller toe om social engineering te gebruiken om mogelijk willekeurige code… Google Apple
- CVE-2026-106413 MEDIUM · 4.2 Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via… Google
- CVE-2026-106412 HIGH · 8.3 Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged… Google Apple
- CVE-2026-106411 HIGH · 8.8 Gebruik na gratis in Parser in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via… Google
- CVE-2026-106410 MEDIUM · 4.2 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via… Google
- CVE-2026-106409 HIGH · 8.3 Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… Google Apple
- CVE-2026-106408 MEDIUM · 6.5 Een beveiligingsfout in Google Chrome voor mobiele apparaten op iOS (vóór versie 155.0.8059.39) stelde een externe aanvaller in staat om het web-origin-beleid te omzeilen via… Google Apple
- CVE-2026-106407 MEDIUM · 6.5 Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions… Google
- CVE-2026-106406 MEDIUM · 5.4 Ontbrekende autorisatie in Mobile in Google Chrome op iOS vóór 155.0.8059.39 stond een externe aanvaller toe om social engineering te gebruiken om UI-elementen te vervalsen… Google Apple
- CVE-2026-106405 MEDIUM · 6.0 Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed… Google
- CVE-2026-106404 MEDIUM · 6.5 Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions… Google
- CVE-2026-106403 HIGH · 8.1 Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via… Google
- CVE-2026-106402 MEDIUM · 4.8 Onjuiste autorisatie in extensies in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om social engineering te gebruiken om UI-elementen te vervalsen via een… Google
- CVE-2026-106401 CRITICAL · 9.6 Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via… Google
- CVE-2026-106400 MEDIUM · 5.4 Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a… Google
- CVE-2026-106399 LOW · 3.3 Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a… Google
- CVE-2026-106398 MEDIUM · 4.3 Onjuiste autorisatie in Media in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om cross-origin-gegevens te lekken via een vervaardigde HTML-pagina. (Ernst van chroombeveiliging:… Google
- CVE-2026-106397 MEDIUM · 6.1 Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions… Google Apple
- CVE-2026-106396 MEDIUM · 5.4 Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin… Google
- CVE-2026-106395 MEDIUM · 4.7 Ongeïnitialiseerde bron in Dawn in Google Chrome op Android vóór 155.0.8059.39 stond een externe aanvaller toe om geheugen buiten de sandbox te lezen via een… Google
- CVE-2026-106394 MEDIUM · 4.3 Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML… Google
- CVE-2026-106393 HIGH · 8.3 Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… Google
- CVE-2026-106392 MEDIUM · 4.3 Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium… Google
- CVE-2026-106391 MEDIUM · 4.2 Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof… Google
- CVE-2026-106390 MEDIUM · 4.3 Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML… Google
- CVE-2026-106389 MEDIUM · 6.5 Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted… Google
- CVE-2026-106388 MEDIUM · 5.3 Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via… Google
- CVE-2026-106387 HIGH · 8.8 Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via… Google Apple
- CVE-2026-106386 MEDIUM · 6.5 Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.… Google
- CVE-2026-106385 MEDIUM · 5.3 Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted… Google
- CVE-2026-106384 MEDIUM · 6.5 Door de ontbrekende autorisatie in SiteIsolation in Google Chrome vóór 155.0.8059.39 kon een externe aanvaller die het rendererproces had gecompromitteerd, de isolatie van de site… Google
- CVE-2026-106383 HIGH · 8.8 Gebruik na gratis in Media in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via… Google
- CVE-2026-106382 CRITICAL · 9.6 Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-106381 MEDIUM · 6.5 Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted… Google Apple
- CVE-2026-106380 MEDIUM · 5.4 Door een verkeerde voorstelling van de gebruikersinterface in Google Chrome vóór 155.0.8059.39 kon een externe aanvaller social engineering gebruiken om UI-elementen te vervalsen via een… Google
- CVE-2026-106379 MEDIUM · 4.3 Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security… Google
- CVE-2026-106378 HIGH · 8.3 Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute… Google Apple
- CVE-2026-106377 HIGH · 8.3 Raceconditie in lettertypen in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe die het rendererproces had gecompromitteerd om willekeurige code buiten de sandbox uit… Google
- CVE-2026-106376 MEDIUM · 4.7 Ongeïnitialiseerde bron in HOEK in Google Chrome op Windows vóór 155.0.8059.39 stond een externe aanvaller toe om geheugen buiten de sandbox te lezen via een… Google Microsoft
- CVE-2026-106375 CRITICAL · 9.6 Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-106374 HIGH · 8.8 Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… Google