DeutschShown in its original language — a full translation is planned for a future version.
Google Chrome / Microsoft Edge: Mehrere Schwachstellen
view advisory published 2026-10-06
Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (247)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-106427US | — | — | ||
Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML… | ||||
| CVE-2026-106426US | — | — | ||
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi… | ||||
| CVE-2026-106425US | —OT elevated | — | ||
Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to b… | ||||
| CVE-2026-106424US | — | — | ||
Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafte… | ||||
| CVE-2026-106423US | — | — | ||
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s… | ||||
| CVE-2026-106422US | —OT elevated | — | ||
Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: L… | ||||
| CVE-2026-106421US | — | — | ||
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev… | ||||
| CVE-2026-106420US | — | — | ||
Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome… | ||||
| CVE-2026-106419US | — | — | ||
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro… | ||||
| CVE-2026-106418US | —OT elevated | — | ||
Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network tra… | ||||
| CVE-2026-106417US | — | — | ||
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro… | ||||
| CVE-2026-106416US | — | — | ||
Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (C… | ||||
| CVE-2026-106415US | — | — | ||
Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2026-106414US | — | — | ||
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… | ||||
| CVE-2026-106413US | — | — | ||
Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (… | ||||
| CVE-2026-106412US | — | — | ||
Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to pote… | ||||
| CVE-2026-106411US | — | — | ||
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security… | ||||
| CVE-2026-106410US | —OT elevated | — | ||
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted H… | ||||
| CVE-2026-106409US | — | — | ||
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arb… | ||||
| CVE-2026-106408US | — | — | ||
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium se… | ||||
showing 20 of 247
02
references
External citations — patches, advisories, analysis.
- Google Stable Channel Update vom 2026-10-06external
- Release notes for Microsoft Edge Security Updates vom 2026-10-08external
- openSUSE Security Update OPENSUSE-SU-2026:0347-1 vom 2026-10-09external
- openSUSE Security Update OPENSUSE-SU-2026:22041-1 vom 2026-10-09external
- WID-SEC-W-2026-3761 - CSAF Versionself
- WID-SEC-2026-3761 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan