CVE tracker
322 subscribers
4.53K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2026-10959 - Use after free in Input in Google Chrome on Androi

CVE ID :CVE-2026-10959
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10960 - Uninitialized Use in Codecs in Google Chrome prior

CVE ID :CVE-2026-10960
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10961 - Use after free in Chrome for iOS in Google Chrome

CVE ID :CVE-2026-10961
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10962 - Type Confusion in Media in Google Chrome prior to

CVE ID :CVE-2026-10962
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10963 - Integer overflow in V8 in Google Chrome prior to 1

CVE ID :CVE-2026-10963
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10964 - Integer overflow in V8 in Google Chrome prior to 1

CVE ID :CVE-2026-10964
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10965 - Integer overflow in DevTools in Google Chrome prio

CVE ID :CVE-2026-10965
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10966 - Inappropriate implementation in Codecs in Google C

CVE ID :CVE-2026-10966
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10967 - Use after free in SurfaceCapture in Google Chrome

CVE ID :CVE-2026-10967
Published : June 4, 2026, 11:03 p.m. | 13 minutes ago
Description :Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10968 - Insufficient validation of untrusted input in Dawn

CVE ID :CVE-2026-10968
Published : June 4, 2026, 11:04 p.m. | 13 minutes ago
Description :Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10969 - Insufficient validation of untrusted input in Exte

CVE ID :CVE-2026-10969
Published : June 4, 2026, 11:04 p.m. | 13 minutes ago
Description :Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10970 - Insufficient validation of untrusted input in Inte

CVE ID :CVE-2026-10970
Published : June 4, 2026, 11:04 p.m. | 13 minutes ago
Description :Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10971 - Insufficient validation of untrusted input in Prin

CVE ID :CVE-2026-10971
Published : June 4, 2026, 11:04 p.m. | 13 minutes ago
Description :Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10972 - Use after free in Ozone in Google Chrome on Linux

CVE ID :CVE-2026-10972
Published : June 4, 2026, 11:04 p.m. | 13 minutes ago
Description :Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10973 - Uninitialized Use in Dawn in Google Chrome prior t

CVE ID :CVE-2026-10973
Published : June 4, 2026, 11:04 p.m. | 12 minutes ago
Description :Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-8873 - Arista EOS Dataplane Denial of Service via Malformed IPsec Packet

CVE ID :CVE-2025-8873
Published : June 4, 2026, 11:04 p.m. | 12 minutes ago
Description :On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detect this condition, and attempt to reset the IPsec processing pipeline. After reset traffic may not resume being processed. There is no impact to non-IPsec traffic or to IPsec traffic not originating or terminating on the system. This issue was reported by an Arista customer.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-11294 - Google Chrome UI Spoofing

CVE ID :CVE-2026-11294
Published : June 5, 2026, 12:17 a.m. | 3 hours ago
Description :Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-11295 - Google Chrome Android WebView Privilege Escalation

CVE ID :CVE-2026-11295
Published : June 5, 2026, 12:17 a.m. | 3 hours ago
Description :Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-11296 - Google Chrome ImageCapture Privilege Escalation

CVE ID :CVE-2026-11296
Published : June 5, 2026, 12:17 a.m. | 3 hours ago
Description :Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-11297 - Google Chrome Reader Mode Local Navigation Restriction Bypass

CVE ID :CVE-2026-11297
Published : June 5, 2026, 12:17 a.m. | 3 hours ago
Description :Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-11298 - Google Chrome for iOS Same Origin Policy Bypass

CVE ID :CVE-2026-11298
Published : June 5, 2026, 12:17 a.m. | 3 hours ago
Description :Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...