browser vulnerabilities

CVE-2026-14385 is a High-severity heap buffer overflow in Google Chrome that the supplied record documents on macOS before version 150.0.7871.46. The Chrome-originated description says a remote attacker could use a crafted HTML page to cause out-of-bounds memory access. CISA-ADP assigned a CVSS...

Google Chrome on macOS must be updated to version 150.0.7871.47 or later for CVE-2026-13974. The vulnerability is an integer overflow in Safe Browsing that could allow a remote attacker to bypass navigation restrictions through a malicious file. The documented scope is specific: Google Chrome on...

CVE-2026-13946 affects Google Chrome on iOS versions earlier than 150.0.7871.47. The published description says crafted HTML can cause cross-origin information leakage. Users should update Chrome through the App Store to 150.0.7871.47 or later and check Chrome’s app/version information if...

CVE-2026-13949 is a Medium-severity policy-enforcement vulnerability in Chrome for Android before version 150.0.7871.47. Google’s description says a remote attacker can use a crafted HTML page to obtain potentially sensitive information from the browser process. The attacker requires no prior...

Takeaway: CVE-2026-13944 affects Google Chrome on macOS only when the installed version is earlier than 150.0.7871.47. Update and relaunch Chrome now, then verify the complete running version. Open the Chrome menu (⋮) > Help > About Google Chrome, let Chrome check for and install the update...

Affected Macs running Google Chrome below 150.0.7871.47 should update, relaunch the browser, and verify the complete installed version. CVE-2026-13878 is a renderer-compromise-to-sandbox-escape issue involving Chrome’s Bluetooth component, not a proven proximity-based Bluetooth attack...

NVD published CVE-2026-13788 on June 30, 2026, with Chrome listed as the CVE source. The record describes a Critical use-after-free vulnerability in Google Chrome on Android versions earlier than 150.0.7871.47. A remote attacker could exploit it through a crafted HTML page to execute arbitrary...

Google Chrome on Mac before version 150.0.7871.46 is affected by CVE-2026-14424, a High-severity use-after-free vulnerability in Dawn. The public description says a remote attacker could potentially perform a sandbox escape by convincing a user to interact with a crafted HTML page. The record...

CVE-2026-14416 is an out-of-bounds read in Chrome’s Dawn graphics component that affects versions before 150.0.7871.46 and could let a remote attacker use a crafted HTML page to cross the browser sandbox under favorable exploit conditions, even though Chromium labels the flaw Low severity. The...

CVE-2026-14399 affects Google Chrome versions earlier than 150.0.7871.46. The Dawn flaw can expose potentially sensitive process-memory information when a user visits a crafted HTML page. Update Chrome, relaunch it, and verify version 150.0.7871.46 or later. What Changed / What to Do Now The...

Google Chrome on ChromeOS before version 150.0.7871.47 is affected by CVE-2026-13986, a medium-severity Media UI spoofing flaw disclosed June 30, 2026, that lets a remote attacker use a crafted HTML page and specific user gestures to misrepresent browser interface information. The bug is not a...

Google Chrome versions before 150.0.7871.47 are affected by CVE-2026-13938, an integer overflow in the browser’s font-handling code that can let a remote attacker trigger an out-of-bounds memory write when a user opens a crafted HTML page. The flaw landed in the National Vulnerability Database...