CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Insufficient input validation in ANGLE in Google Chrome prior to 149.0.7827.53 allows a remote attacker who compromised the renderer to potentially escape the sandbox via a crafted HTML page.
Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension.
Google Chrome on Mac prior to version 149.0.7827.53 has a use-after-free vulnerability in File Input. A remote attacker, after convincing a user to perform specific UI gestures, can use a crafted HTML page to potentially perform a sandbox escape.
Insufficient input validation in Codecs in Google Chrome prior to 149.0.7827.53 allows a remote attacker who compromised the renderer to potentially escape the sandbox via a crafted HTML page.
Use-after-free vulnerability in Codecs in Google Chrome on Windows prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.
Integer overflow in ANGLE component in Google Chrome prior to 149.0.7827.53 allows a remote attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page.
Race condition vulnerability in GPU in Google Chrome on Android prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.
Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via malicious network traffic.
Insufficient validation of untrusted input in the ANGLE component of Google Chrome prior to version 149.0.7827.53. A remote attacker could potentially escape the sandbox via a crafted HTML page.
Use-after-free vulnerability in ANGLE component in Google Chrome prior to 149.0.7827.53 allows a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.
Type Confusion vulnerability in the ANGLE component of Google Chrome prior to version 149.0.7827.53. A remote attacker could potentially escape the sandbox via a crafted HTML page.
Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.
Google Chrome on Windows prior to version 149.0.7827.53 has a type confusion vulnerability in the GPU component. A remote attacker who has compromised the renderer process can use a crafted HTML page to potentially perform a sandbox escape.
Inappropriate implementation in Base in Google Chrome on Windows (before 149.0.7827.53) allows a remote attacker who compromised the renderer to potentially escape the sandbox via a crafted HTML page.
Out of bounds write in ANGLE in Google Chrome on Mac (before 149.0.7827.53) allows a remote attacker who compromised the renderer to potentially escape the sandbox via a crafted HTML page.
Out-of-bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allows a remote attacker to potentially escape the sandbox via a crafted video file.
Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.
Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page. (Severity: Medium)
Use-after-free vulnerability in the USB component of Google Chrome on Windows prior to 149.0.7827.53. A remote attacker could potentially escape the sandbox via a crafted HTML page.