Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 1, 2026
- High8.8Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Apr 1, 2026
- High7.5Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of b…Apr 1, 2026
- Medium6.5Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process m…Apr 1, 2026
- High8.8Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Apr 1, 2026
- High8.8Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Apr 1, 2026
- Medium6.3Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 1, 2026
- High8.8Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Apr 1, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityKEVEPSS 0.7%Mar 31, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium6.1PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- High8.8Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Mar 24, 2026
- High8.8Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Mar 24, 2026
- High8.8Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Mar 24, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Mar 24, 2026
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Mar 24, 2026
- High8.8Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Mar 24, 2026
- High8.8Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Mar 24, 2026
- High8.8Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Mar 24, 2026
- Low3.7PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 20, 2026
- High8.8Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Mar 20, 2026
- High8.8Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Mar 20, 2026