Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um einen nicht näher spezifizierten Angriff durchzuführen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 81
-
Critical 9.6
Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbo…
-
Critical 9.6
Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sand…
-
High 8.8
Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary c…
-
High 8.8
Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convin…
-
High 8.8
Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an o…
-
High 8.8
Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitr…
-
High 8.8
Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary…
-
High 8.8
Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary c…
-
High 8.8
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attac…
-
High 8.8
Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary …
-
High 8.8
Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentia…
-
High 8.8
Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to …
-
High 8.8
Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrar…
-
High 8.8
Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary co…
-
High 8.8
Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code insi…
-
High 8.8
Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user t…
-
High 8.3
Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to…
-
High 8.3
Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromis…
-
High 8.3
Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the rende…
-
High 8.3
Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage…
-
High 8.3
Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox es…
-
High 8.3
Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the rende…
-
High 8.3
Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially …
-
High 8.3
Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had comprom…
-
High 8.3
Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised …
-
High 8.3
Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who ha…
-
High 8.3
Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromise…
-
High 8.3
Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the…
-
High 8.3
Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially …
-
High 8.3
Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker wh…
-
High 8.3
Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially…
-
High 8.3
Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromise…
-
High 8.3
Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the rendere…
-
High 7.5
Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromi…
-
High 7.5
Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary co…
-
High 7.5
Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attac…
-
High 7.5
Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised …
-
High 7.5
Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had…
-
Medium 6.5
Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in respo…
-
Medium 6.5
Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised th…
-
Medium 6.5
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive…
-
Medium 5.9
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute a…
-
Medium 5.5
Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass …
-
Medium 5.4
Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to injec…
-
Medium 5.4
Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI sp…
-
Medium 5.3
Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote at…
-
Medium 5.3
Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker wh…
-
Medium 5.3
Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker wh…
-
Medium 5.3
Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the ren…
-
Medium 5.3
Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convince…
-
Medium 5.3
Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had…
-
Medium 5.3
Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially…
-
Medium 5.3
Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker …
-
Medium 4.7
Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convi…
-
Medium 4.3
Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote a…
-
Medium 4.3
Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker t…
-
Medium 4.3
Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an…
-
Medium 4.3
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker …
-
Medium 4.3
Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker t…
-
Medium 4.3
Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to le…
-
Medium 4.3
Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote …
-
Medium 4.3
Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attack…
-
Medium 4.3
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an o…
-
Medium 4.3
Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote at…
-
Medium 4.2
Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacke…
-
Medium 4.2
Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had…
-
Low 3.1
Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a rem…
-
Low 3.1
Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised…
-
Low 3.1
Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the render…
-
Low 3.1
Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromis…
-
Low 3.1
Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who…
-
Low 3.1
-
Low 3.1
Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacke…
-
Low 3.1
Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromis…
-
Low 3.1
Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker w…
Revision history
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Neue Updates von Microsoft aufgenommen
-
#1
Initiale Fassung
References
-
Chrome Releases: Stable Channel Update for Desktop vom 2026-05-14
https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html
-
Release notes for Microsoft Edge Security Updates vom 2026-05-15
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-15-2026
-
Fedora Security Advisory FEDORA-2026-F8C2552DE7 vom 2026-05-16
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f8c2552de7
-
Fedora Security Advisory FEDORA-EPEL-2026-21C0E6B20C vom 2026-05-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-21c0e6b20c
-
Fedora Security Advisory FEDORA-EPEL-2026-266B62AEA6 vom 2026-05-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-266b62aea6
-
Fedora Security Advisory FEDORA-EPEL-2026-4DD3A97960 vom 2026-05-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4dd3a97960
-
Fedora Security Advisory FEDORA-EPEL-2026-F121D3BE68 vom 2026-05-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f121d3be68
-
Fedora Security Advisory FEDORA-2026-6D848132EE vom 2026-05-16
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6d848132ee
-
openSUSE Security Update OPENSUSE-SU-2026:10786-1 vom 2026-05-17
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WI237TDM57LG4CHFIHJ4TNIWQ3L62GZG/
-
Debian Security Advisory DSA-6273 vom 2026-05-15
https://lists.debian.org/debian-security-announce/2026/msg00184.html
-
Fedora Security Advisory FEDORA-2026-885A3F8C70 vom 2026-05-16
https://bodhi.fedoraproject.org/updates/FEDORA-2026-885a3f8c70
-
openSUSE Security Update OPENSUSE-SU-2026:20775-1 vom 2026-05-23
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JSXMBJAQKZ5EDPGO5YH4Z2YNWN4EUHVN/
-
Red Hat Security Advisory RHSA-2026:98455 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98455