CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.10)
Use after free in InterestGroups in Google Chrome prior to version 149.0.7827.103 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Heap buffer overflow in GPU in Google Chrome on Android prior to version 149.0.7827.103 allows a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
In Google Chrome prior to version 149.0.7827.103, there is a use after free vulnerability in PDF handling that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
An out of bounds read in WebRTC in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker who compromised the GPU process to potentially exploit heap corruption via a crafted HTML page.
Use after free in Payments in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Use after free in Skia in Google Chrome prior to version 149.0.7827.103 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Type Confusion in Bindings in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.103 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Use after free in Payments in Google Chrome on Mac prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Use after free in ServiceWorker in Google Chrome prior to version 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Integer overflow in Media in Google Chrome on Mac prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Use after free in Extensions in Google Chrome prior to version 149.0.7827.103 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A use after free vulnerability in V8 in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Use after free in V8 in Google Chrome prior to version 149.0.7827.103 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A use after free vulnerability in FullScreen in Google Chrome on Windows prior to version 149.0.7827.103 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Use after free in Printing in Google Chrome on Android prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
In Google Chrome prior to version 149.0.7827.103, a use after free vulnerability in ViewTransitions allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Out of bounds read and write in V8 in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A use after free vulnerability in Views in Google Chrome on Linux prior to version 149.0.7827.103 allows an attacker to execute arbitrary code via a malicious extension if a user installs it.