Chromium: CVE-2026-84350 Use after free in TabStrip

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chromium: CVE-2026-84354 Incorrect authorization in FileSystem

Chromium: CVE-2026-84355 Incorrect authorization in Navigation

Chromium: CVE-2026-84356 UI misrepresentation in FullScreen

Chromium: CVE-2026-84357 Improper input validation in Omnibox

Chromium: CVE-2026-84358 Improper privilege management in Downloads

Chromium: CVE-2026-84347 Use after free in WebRTC

Chromium: CVE-2026-84348 Information leak in MediaCapture

Chromium: CVE-2026-84349 Use after free in Browser

Chromium: CVE-2026-84359 Information leak in Skia

Chromium: CVE-2026-84323 Missing authorization in FileSystem

Chromium: CVE-2026-84324 Use after free in Proxy

Chromium: CVE-2026-84325 Improper input validation in DataTransfer

Chromium: CVE-2026-84326 Uninitialized resource in V8

Chromium: CVE-2026-84328 Missing authorization in FileSystem

Chromium: CVE-2026-84329 Confused deputy in CredentialProvider

Chromium: CVE-2026-84331 Incorrect authorization in Actor

Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings

Chromium: CVE-2026-84334 Incorrect authorization in Chromoting

Chromium: CVE-2026-84335 Incorrect authorization in TabStrip

Chromium: CVE-2026-84327 Incorrect authorization in Autofill

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.