آخرین آسیبپذیریها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-121180 | 8.8بالا |
Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121179 | 8.8بالا |
Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121083 | 8.8بالا |
Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121082 | 8.8بالا |
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121113 | بدون امتیاز |
Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121188 | 8.8بالا |
Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121118 | 8.8بالا |
Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121124 | 8.8بالا |
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severi…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121047 | 8.8بالا |
Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121166 | بدون امتیاز |
Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121185 | 9.6بحرانی |
Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121207 | بدون امتیاز |
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121071 | 9.6بحرانی |
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121095 | بدون امتیاز |
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121140 | 8.3بالا |
Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML pag…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121233 | بدون امتیاز |
Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121173 | بدون امتیاز |
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121074 | 9.6بحرانی |
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Hi…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121098 | 8.3بالا |
Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML pa…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121174 | بدون امتیاز |
Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121112 | 8.3بالا |
Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML p…
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121197 | بدون امتیاز |
Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121107 | بدون امتیاز |
Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121126 | 9.6بحرانی |
Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|
| CVE-2026-121203 | بدون امتیاز |
Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Google Chrome
|
— |
۱۴۰۵/۰۸/۱۳
۱ ساعت پیش
|