CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.21)
Insufficient validation of untrusted input in the GPU component of Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A Use-After-Free vulnerability in the DOM component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
An out-of-bounds write vulnerability in the V8 engine of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code within a sandbox via a crafted HTML page.
An out-of-bounds read vulnerability in the GPU component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially escape the sandbox via a crafted HTML page.
A Use-After-Free vulnerability in the GPU component of Google Chrome prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A Use-After-Free vulnerability in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as Critical by Chromium security.
Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability has a critical severity rating.
A Use-After-Free vulnerability in the XR component of Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue has a Critical severity rating from Chromium.
An out-of-bounds read and write vulnerability in the Dawn component of Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
A Use-After-Free vulnerability in WebView component of Google Chrome on Android prior to 148.0.7778.216 allows a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue has a Critical severity rating from Chromium.
A use-after-free vulnerability in the Proxy component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted PAC script.
Insufficient validation of untrusted input in the UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A use-after-free vulnerability in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
A use-after-free vulnerability in the Base component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page.
Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
An out-of-bounds write vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page. The issue is rated as Critical severity by Chromium.
A use-after-free vulnerability in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A Use-After-Free vulnerability in the ANGLE component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as Critical by Chromium security team.
A use-after-free vulnerability in the Network component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
The SAML SSO - Service Provider plugin for Drupal contains an improper check for unusual or exceptional conditions vulnerability, allowing privilege escalation. The issue affects versions before 3.1.4.