| 0 |
| url |
VCID-1sea-z3vg-wfc4 |
| vulnerability_id |
VCID-1sea-z3vg-wfc4 |
| summary |
Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6299
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1sea-z3vg-wfc4 |
|
| 1 |
| url |
VCID-212t-kjka-pbe4 |
| vulnerability_id |
VCID-212t-kjka-pbe4 |
| summary |
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6318
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-212t-kjka-pbe4 |
|
| 2 |
| url |
VCID-3c8j-6wcw-83ax |
| vulnerability_id |
VCID-3c8j-6wcw-83ax |
| summary |
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6305
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3c8j-6wcw-83ax |
|
| 3 |
| url |
VCID-47az-428z-bkar |
| vulnerability_id |
VCID-47az-428z-bkar |
| summary |
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6304
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-47az-428z-bkar |
|
| 4 |
| url |
VCID-7x3z-8d6t-vfen |
| vulnerability_id |
VCID-7x3z-8d6t-vfen |
| summary |
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6362
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7x3z-8d6t-vfen |
|
| 5 |
| url |
VCID-8j9g-6zs1-13am |
| vulnerability_id |
VCID-8j9g-6zs1-13am |
| summary |
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6314
|
| risk_score |
3.6 |
| exploitability |
0.5 |
| weighted_severity |
7.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8j9g-6zs1-13am |
|
| 6 |
| url |
VCID-97y1-b8j2-xfb5 |
| vulnerability_id |
VCID-97y1-b8j2-xfb5 |
| summary |
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6298
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-97y1-b8j2-xfb5 |
|
| 7 |
| url |
VCID-9amk-6z38-qbb1 |
| vulnerability_id |
VCID-9amk-6z38-qbb1 |
| summary |
Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6313
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
6.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9amk-6z38-qbb1 |
|
| 8 |
| url |
VCID-9h91-43nj-7qgy |
| vulnerability_id |
VCID-9h91-43nj-7qgy |
| summary |
Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6315
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9h91-43nj-7qgy |
|
| 9 |
| url |
VCID-dzf3-492x-budu |
| vulnerability_id |
VCID-dzf3-492x-budu |
| summary |
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6303
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dzf3-492x-budu |
|
| 10 |
| url |
VCID-erxp-a8pr-zyff |
| vulnerability_id |
VCID-erxp-a8pr-zyff |
| summary |
Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6296
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-erxp-a8pr-zyff |
|
| 11 |
| url |
VCID-fk6m-8k4f-hyhz |
| vulnerability_id |
VCID-fk6m-8k4f-hyhz |
| summary |
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6302
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fk6m-8k4f-hyhz |
|
| 12 |
| url |
VCID-hyew-s4ya-43bv |
| vulnerability_id |
VCID-hyew-s4ya-43bv |
| summary |
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6361
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hyew-s4ya-43bv |
|
| 13 |
| url |
VCID-jd9x-rsee-ekfk |
| vulnerability_id |
VCID-jd9x-rsee-ekfk |
| summary |
Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6308
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jd9x-rsee-ekfk |
|
| 14 |
| url |
VCID-jku3-pwsy-bufq |
| vulnerability_id |
VCID-jku3-pwsy-bufq |
| summary |
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6311
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jku3-pwsy-bufq |
|
| 15 |
| url |
VCID-jqs4-fgj9-63g7 |
| vulnerability_id |
VCID-jqs4-fgj9-63g7 |
| summary |
Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6297
|
| risk_score |
3.8 |
| exploitability |
0.5 |
| weighted_severity |
7.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jqs4-fgj9-63g7 |
|
| 16 |
|
| 17 |
| url |
VCID-mjv9-578z-3kej |
| vulnerability_id |
VCID-mjv9-578z-3kej |
| summary |
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6312
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
6.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mjv9-578z-3kej |
|
| 18 |
| url |
VCID-mp8f-94vu-jyf9 |
| vulnerability_id |
VCID-mp8f-94vu-jyf9 |
| summary |
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6301
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mp8f-94vu-jyf9 |
|
| 19 |
| url |
VCID-my86-8n81-y3hd |
| vulnerability_id |
VCID-my86-8n81-y3hd |
| summary |
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6307
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-my86-8n81-y3hd |
|
| 20 |
| url |
VCID-ndkj-5v64-cfa9 |
| vulnerability_id |
VCID-ndkj-5v64-cfa9 |
| summary |
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6309
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ndkj-5v64-cfa9 |
|
| 21 |
| url |
VCID-p4dd-y4mm-fqam |
| vulnerability_id |
VCID-p4dd-y4mm-fqam |
| summary |
Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6363
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p4dd-y4mm-fqam |
|
| 22 |
| url |
VCID-q17c-ud54-5ydd |
| vulnerability_id |
VCID-q17c-ud54-5ydd |
| summary |
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6306
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q17c-ud54-5ydd |
|
| 23 |
| url |
VCID-qrwz-k5dg-27b2 |
| vulnerability_id |
VCID-qrwz-k5dg-27b2 |
| summary |
Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6364
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qrwz-k5dg-27b2 |
|
| 24 |
| url |
VCID-thk2-w3k4-jfep |
| vulnerability_id |
VCID-thk2-w3k4-jfep |
| summary |
Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6360
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-thk2-w3k4-jfep |
|
| 25 |
| url |
VCID-uded-9de1-xkdj |
| vulnerability_id |
VCID-uded-9de1-xkdj |
| summary |
Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6358
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uded-9de1-xkdj |
|
| 26 |
| url |
VCID-usvm-2xea-ffd6 |
| vulnerability_id |
VCID-usvm-2xea-ffd6 |
| summary |
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6310
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-usvm-2xea-ffd6 |
|
| 27 |
| url |
VCID-uyu5-b3md-37cm |
| vulnerability_id |
VCID-uyu5-b3md-37cm |
| summary |
Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6319
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uyu5-b3md-37cm |
|
| 28 |
| url |
VCID-x1xm-1qpa-u7c1 |
| vulnerability_id |
VCID-x1xm-1qpa-u7c1 |
| summary |
Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6359
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x1xm-1qpa-u7c1 |
|
| 29 |
|
| 30 |
| url |
VCID-ywwf-hc75-nbdm |
| vulnerability_id |
VCID-ywwf-hc75-nbdm |
| summary |
Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-6316
|
| risk_score |
4.3 |
| exploitability |
0.5 |
| weighted_severity |
8.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ywwf-hc75-nbdm |
|