Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um Code auszuführen und um Sicherheitsmechanismen zu umgehen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 27
-
Critical 9.6
Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially…
-
High 8.8
Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to insta…
-
High 8.8
Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentiall…
-
High 8.8
Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially e…
-
High 8.8
Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arb…
-
High 8.8
Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrar…
-
High 8.3
Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the rendere…
-
High 8.3
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromise…
-
High 8.3
Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remo…
-
High 7.5
Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to enga…
-
High 7.5
Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to e…
-
Medium 6.5
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sen…
-
Medium 6.1
Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbi…
-
Medium 6.1
Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbi…
-
Medium 4.3
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to…
-
Medium 4.3
Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypa…
-
Medium 4.3
Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to byp…
-
Medium 4.3
Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass…
-
Low 3.3
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowe…
Revision history
-
#6
Update von Microsoft aufgenommen
-
#5
Neue Updates von IGEL aufgenommen
-
#4
Edge Update aufgenommen
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Neue Updates von Fedora, Debian und openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
Chrome Stable Channel Update vom 2026-07-08
http://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html
-
Fedora Security Advisory FEDORA-EPEL-2026-4F9779F295 vom 2026-07-11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4f9779f295
-
Debian Security Advisory DSA-6387 vom 2026-07-12
https://security-tracker.debian.org/tracker/DSA-6387-1
-
Fedora Security Advisory FEDORA-EPEL-2026-36FC7F58B7 vom 2026-07-11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-36fc7f58b7
-
Fedora Security Advisory FEDORA-2026-7E82BF89F4 vom 2026-07-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7e82bf89f4
-
Debian Security Advisory DLA-4677 vom 2026-07-12
https://lists.debian.org/debian-lts-announce/2026/07/msg00019.html
-
openSUSE Security Update OPENSUSE-SU-2026:0238-1 vom 2026-07-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7RUZC4MWFCQKLIBFSFCBKLBPW5W2KS7/
-
openSUSE Security Update OPENSUSE-SU-2026:11254-1 vom 2026-07-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F4NQMNT7FY3XRGGINKYFR4EQI2DGYCLW/
-
Release notes for Microsoft Edge Security Updates vom 2026-07-13
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#july-13-2026
-
IGEL Security Notice ISN-2026-31 vom 2026-07-24
https://kb.igel.com/en/security-safety/current/isn-2026-31-chromium-vulnerabilities
-
Release notes for Microsoft Edge Security Updates vom 2026-07-28
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security