آخرین آسیبپذیریها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-121038 | بدون امتیاز |
Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121051 | بدون امتیاز |
UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121044 | 8.8بالا |
Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121080 | بدون امتیاز |
Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121228 | 8.8بالا |
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121181 | 8.8بالا |
Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121180 | 8.8بالا |
Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121179 | 8.8بالا |
Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121083 | 8.8بالا |
Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121082 | 8.8بالا |
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121113 | بدون امتیاز |
Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121188 | 8.8بالا |
Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121118 | 8.8بالا |
Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121124 | 8.8بالا |
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severi…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121047 | 8.8بالا |
Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121166 | بدون امتیاز |
Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121185 | 9.6بحرانی |
Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121207 | بدون امتیاز |
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121071 | 9.6بحرانی |
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121095 | بدون امتیاز |
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121140 | 8.3بالا |
Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML pag…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121233 | 8.8بالا |
Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121173 | بدون امتیاز |
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121074 | 9.6بحرانی |
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Hi…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|
| CVE-2026-121098 | 8.3بالا |
Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML pa…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۲ ساعت پیش
|