p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de chromium · Página 153

Vulnerabilidades publicadas para chromium en los últimos 30 días: 933. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 5824

  1. CVE-2026-11100

    Crítica · CVSS 9.6EPSS 0,26%Corrección disponible

    CVE-2026-11100

    Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización
  2. CVE-2026-11095

    Crítica · CVSS 9.6EPSS 0,28%Corrección disponible

    CVE-2026-11095

    Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización
  3. CVE-2026-11094

    Crítica · CVSS 9.6EPSS 0,23%Corrección disponible

    CVE-2026-11094

    Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización
  4. CVE-2026-11092

    Alta · CVSS 8.8EPSS 0,18%Corrección disponible

    CVE-2026-11092

    Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización
  5. CVE-2026-11089

    Media · CVSS 6.5EPSS 0,25%Corrección disponible

    CVE-2026-11089

    Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización
  6. CVE-2026-11086

    Alta · CVSS 8.8EPSS 0,28%Corrección disponible

    CVE-2026-11086

    Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 149.0.7827.53-1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →