Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebigen Code auszuführen, Informationen offenzulegen und den Benutzer zu täuschen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 60
-
Critical 9.8
Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the rend…
-
Critical 9.6
Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to e…
-
High 8.8
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary co…
-
High 8.8
Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitra…
-
High 8.8
Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitra…
-
High 8.8CVE-2026-5865 Public exploit
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbit…
-
High 8.8
Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitra…
-
High 8.8
Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote att…
-
High 8.8
Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker w…
-
High 8.8CVE-2026-5904 Rejected
Determined a bug and not a vulnerability
-
High 8.8
Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bound…
-
High 8.8
Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a mal…
-
High 8.1
Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an o…
-
High 8.1
Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of boun…
-
High 8.1
Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t…
-
High 7.5
Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive inf…
-
Medium 6.8
Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via…
-
Medium 6.6
Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compr…
-
Medium 6.5
Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to lea…
-
Medium 6.5
Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigat…
-
Medium 6.5
Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote…
-
Medium 6.5
Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially …
-
Medium 6.5
Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a…
-
Medium 6.5
Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user t…
-
Medium 6.5
Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to pe…
-
Medium 6.5
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attac…
-
Medium 6.1
Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage…
-
Medium 6.1
Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker…
-
Medium 5.4
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the …
-
Medium 5.3
Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain poten…
-
Medium 4.3
Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentiall…
-
Medium 4.3
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially s…
-
Medium 4.3
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially s…
-
Medium 4.3
Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a c…
-
Medium 4.3
Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing…
-
Medium 4.3
Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had…
-
Medium 4.3
Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spo…
-
Medium 4.3
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a re…
-
Medium 4.3
Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive …
-
Medium 4.3
Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had…
-
Medium 4.3
Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigat…
-
Medium 4.3
Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a us…
-
Medium 4.3
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI…
-
Medium 4.3
Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-downloa…
-
Medium 4.3
Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof …
-
Medium 4.3
Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content sec…
-
Medium 4.3
Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had co…
Revision history
-
#3
Neue Updates von openSUSE und Debian aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update for Desktop vom 2026-04-07
https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html
-
Versionshinweise für Microsoft Edge-Sicherheitsupdates vom 2026-04-08
https://learn.microsoft.com/de-de/deployedge/microsoft-edge-relnotes-security#april-8-2026
-
Fedora Security Advisory FEDORA-EPEL-2026-82B8678FE1 vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-82b8678fe1
-
Fedora Security Advisory FEDORA-EPEL-2026-718899309A vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-718899309a
-
Fedora Security Advisory FEDORA-EPEL-2026-4BB81189D7 vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4bb81189d7
-
Fedora Security Advisory FEDORA-2026-F0AB053633 vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f0ab053633
-
Fedora Security Advisory FEDORA-2026-952F3C3D9E vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-952f3c3d9e
-
Fedora Security Advisory FEDORA-2026-900EEF4571 vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-2026-900eef4571
-
Fedora Security Advisory FEDORA-EPEL-2026-F96B4915E2 vom 2026-04-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f96b4915e2
-
openSUSE Security Update OPENSUSE-SU-2026:10530-1 vom 2026-04-12
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JH7V4GYADHAPXOJVOZFTGVVX2HTZ4HDW/
-
Debian Security Advisory DSA-6205 vom 2026-04-10
https://lists.debian.org/debian-security-announce/2026/msg00115.html
-
openSUSE Security Update OPENSUSE-SU-2026:0124-1 vom 2026-04-12
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NHWVKQ3TM45IZGIHYSMVPABSXVBLAEQL/