آخرین آسیبپذیریها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-118345 | 8.8بالا |
Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118313 | 8.8بالا |
Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118332 | 9.6بحرانی |
Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.…
Google Chrome
|
۰٫۲۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118334 | 8.8بالا |
Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118311 | 8.8بالا |
Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118343 | 8.8بالا |
Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sev…
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118359 | 8.8بالا |
Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118327 | 8.8بالا |
Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118349 | 8.8بالا |
Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec…
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118353 | 8.8بالا |
Missing authorization in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118358 | 8.8بالا |
Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118336 | 8.8بالا |
Race condition in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118333 | 5.4متوسط |
Buffer overflow in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118328 | 8.8بالا |
Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118351 | 8.8بالا |
Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118307 | 8.8بالا |
Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۳٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118355 | 9.6بحرانی |
Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118352 | 8.8بالا |
Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118337 | 5.4متوسط |
Use after free in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118321 | 9.6بحرانی |
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr…
Google Chrome
|
۰٫۳۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118340 | 9.6بحرانی |
Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118354 | 8.8بالا |
Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118329 | 8.8بالا |
Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118322 | 4.3متوسط |
Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118320 | 8.8بالا |
Race condition in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
۰٫۳۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|