CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.13)
Inappropriate implementation in WebAppInstalls in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
Insufficient validation of untrusted input in DevTools in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
Inappropriate implementation in Extensions in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file.
Inappropriate implementation in Payments in Google Chrome on Android prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform domain spoofing via a crafted HTML page.
Insufficient policy enforcement in Actor in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Inappropriate implementation in Link Preview in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
Insufficient policy enforcement in Extensions in Google Chrome prior to version 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who compromised the renderer process to leak cross-origin data via a crafted HTML page.
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Google Chrome versions prior to 149.0.7827.53 contain a vulnerability allowing an out of bounds memory read via a crafted HTML page by a remote attacker.
An out of bounds read in ANGLE in Google Chrome on Windows prior to version 149.0.7827.53 allowed a remote attacker who compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
In Google Chrome prior to version 149.0.7827.53, an out of bounds read in ANGLE allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
Nieodpowiednia implementacja w systemie płatności w Google Chrome przed wersją 149.0.7827.53 umożliwiała zdalnemu atakującemu, który przekonał użytkownika do wykonania określonych gestów interfejsu użytkownika, przeprowadzenie oszustwa interfejsu użytkownika za pomocą spreparowanej strony HTML.
Integer overflow in ANGLE in Google Chrome on Windows prior to version 149.0.7827.53 allowed a remote attacker who compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
W Google Chrome przed wersją 149.0.7827.53 występowała podatność na odczyt poza granicami pamięci w module Media. Atakujący w lokalnej sieci mógł wykorzystać złośliwy ruch sieciowy do przeprowadzenia odczytu pamięci poza dozwolonymi granicami.
Insufficient policy enforcement in Extensions in Google Chrome prior to version 149.0.7827.53 allows an attacker who convinced a user to install a malicious extension to bypass access control.
Inappropriate implementation in Workers in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Wykorzystanie niezainicjowanej pamięci w ANGLE w Google Chrome przed wersją 149.0.7827.53 umożliwia zdalnemu atakującemu uzyskanie potencjalnie wrażliwych informacji z pamięci procesu za pomocą spreparowanej strony HTML.