Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Chromium CVE-2026-95339: Use after free in ServiceWorker
Chromium CVE-2026-95356: Use after free in WindowDialog
Chromium CVE-2026-95310: Use after free in AdFilter
Chromium CVE-2026-95313: Use after free in Fullscreen
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
Chromium CVE-2026-93373: Use after free in Extensions
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Chromium CVE-2026-91738: Improper input validation
Chromium CVE-2026-91729: Use after free
Chromium CVE-2026-91718: Use after free
Chromium CVE-2026-91716: Use after free
Chromium CVE-2026-91710: Use after free
Chromium CVE-2026-91728: Integer overflow
Chromium CVE-2026-91749: Use after free
Chromium CVE-2026-95299: Use after free in GPU
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Chromium CVE-2026-87544: Incorrect authorization in Extensions
Chromium CVE-2026-87448: Use after free in DevTools
Chromium CVE-2026-87595: Server-side request forgery in Mobile
Chromium CVE-2026-87526: Use after free in Passwords
Chromium CVE-2026-87609: Use after free in Sharing
Chromium CVE-2026-87634: Use after free in WebPackaging