{"title":"PublicCVE — google","link":"https://publiccve.com","items":[{"cve_id":"CVE-2026-93386","title":"CVE-2026-93386 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93386","description":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)","severity":"MEDIUM","cvss_score":5.4,"published":"2026-09-17T21:08:43.666000Z"},{"cve_id":"CVE-2026-93385","title":"CVE-2026-93385 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93385","description":"Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":6.5,"published":"2026-09-17T21:08:43.418000Z"},{"cve_id":"CVE-2026-93378","title":"CVE-2026-93378 (LOW)","link":"https://publiccve.com/cve/CVE-2026-93378","description":"Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)","severity":"LOW","cvss_score":3.1,"published":"2026-09-17T21:08:43.186000Z"},{"cve_id":"CVE-2026-93376","title":"CVE-2026-93376 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93376","description":"Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":6.3,"published":"2026-09-17T21:08:42.949000Z"},{"cve_id":"CVE-2026-93383","title":"CVE-2026-93383 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93383","description":"Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-17T21:08:42.747000Z"},{"cve_id":"CVE-2026-93384","title":"CVE-2026-93384 (LOW)","link":"https://publiccve.com/cve/CVE-2026-93384","description":"Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)","severity":"LOW","cvss_score":3.7,"published":"2026-09-17T21:08:42.526000Z"},{"cve_id":"CVE-2026-93380","title":"CVE-2026-93380 (LOW)","link":"https://publiccve.com/cve/CVE-2026-93380","description":"Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","severity":"LOW","cvss_score":3.1,"published":"2026-09-17T21:08:42.321000Z"},{"cve_id":"CVE-2026-93377","title":"CVE-2026-93377 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-93377","description":"Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-17T21:08:42.110000Z"},{"cve_id":"CVE-2026-93379","title":"CVE-2026-93379 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93379","description":"Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-17T21:08:41.876000Z"},{"cve_id":"CVE-2026-93381","title":"CVE-2026-93381 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-93381","description":"Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-17T21:08:41.639000Z"},{"cve_id":"CVE-2026-93373","title":"CVE-2026-93373 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-93373","description":"Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-17T21:08:41.397000Z"},{"cve_id":"CVE-2026-93387","title":"CVE-2026-93387 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-93387","description":"Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-17T21:08:41.190000Z"},{"cve_id":"CVE-2026-93382","title":"CVE-2026-93382 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-93382","description":"Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-17T21:08:40.657000Z"},{"cve_id":"CVE-2026-93375","title":"CVE-2026-93375 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-93375","description":"Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.1,"published":"2026-09-17T21:08:40.436000Z"},{"cve_id":"CVE-2026-93372","title":"CVE-2026-93372 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-93372","description":"Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-17T21:08:40.122000Z"},{"cve_id":"CVE-2026-93374","title":"CVE-2026-93374 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-93374","description":"Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-17T21:08:39.736000Z"},{"cve_id":"CVE-2026-89418","title":"CVE-2026-89418 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-89418","description":"google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested START_GROUP wire bytes to any Node.js service that calls the generated deserializeBinary() API, causing a RangeError: Maximum call stack size exceeded and crashing the process. No authentication or prior knowledge of the schema is required.","severity":"HIGH","cvss_score":8.7,"published":"2026-09-17T13:27:30.163000Z"},{"cve_id":"CVE-2026-91719","title":"CVE-2026-91719 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91719","description":"Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-15T20:41:36.469000Z"},{"cve_id":"CVE-2026-91722","title":"CVE-2026-91722 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91722","description":"Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:36.272000Z"},{"cve_id":"CVE-2026-91730","title":"CVE-2026-91730 (LOW)","link":"https://publiccve.com/cve/CVE-2026-91730","description":"Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)","severity":"LOW","cvss_score":3.1,"published":"2026-09-15T20:41:36.048000Z"},{"cve_id":"CVE-2026-91738","title":"CVE-2026-91738 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-91738","description":"Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-15T20:41:35.801000Z"},{"cve_id":"CVE-2026-91713","title":"CVE-2026-91713 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91713","description":"Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":4.2,"published":"2026-09-15T20:41:35.572000Z"},{"cve_id":"CVE-2026-91739","title":"CVE-2026-91739 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91739","description":"Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":4.2,"published":"2026-09-15T20:41:35.335000Z"},{"cve_id":"CVE-2026-91725","title":"CVE-2026-91725 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91725","description":"Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":5.3,"published":"2026-09-15T20:41:35.089000Z"},{"cve_id":"CVE-2026-91714","title":"CVE-2026-91714 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91714","description":"Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":5.3,"published":"2026-09-15T20:41:34.850000Z"},{"cve_id":"CVE-2026-91742","title":"CVE-2026-91742 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91742","description":"Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":4.8,"published":"2026-09-15T20:41:34.646000Z"},{"cve_id":"CVE-2026-91732","title":"CVE-2026-91732 (LOW)","link":"https://publiccve.com/cve/CVE-2026-91732","description":"Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","severity":"LOW","cvss_score":3.1,"published":"2026-09-15T20:41:34.465000Z"},{"cve_id":"CVE-2026-91723","title":"CVE-2026-91723 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91723","description":"Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"MEDIUM","cvss_score":4.2,"published":"2026-09-15T20:41:34.190000Z"},{"cve_id":"CVE-2026-91745","title":"CVE-2026-91745 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91745","description":"Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:33.958000Z"},{"cve_id":"CVE-2026-91715","title":"CVE-2026-91715 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91715","description":"Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:33.733000Z"},{"cve_id":"CVE-2026-91711","title":"CVE-2026-91711 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91711","description":"Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:33.539000Z"},{"cve_id":"CVE-2026-91737","title":"CVE-2026-91737 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91737","description":"Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:33.308000Z"},{"cve_id":"CVE-2026-91729","title":"CVE-2026-91729 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-91729","description":"Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-15T20:41:33.103000Z"},{"cve_id":"CVE-2026-91746","title":"CVE-2026-91746 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91746","description":"Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-15T20:41:32.828000Z"},{"cve_id":"CVE-2026-91716","title":"CVE-2026-91716 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-91716","description":"Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-15T20:41:32.590000Z"},{"cve_id":"CVE-2026-91718","title":"CVE-2026-91718 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-91718","description":"Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-15T20:41:32.390000Z"},{"cve_id":"CVE-2026-91710","title":"CVE-2026-91710 (CRITICAL)","link":"https://publiccve.com/cve/CVE-2026-91710","description":"Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"CRITICAL","cvss_score":9.6,"published":"2026-09-15T20:41:32.197000Z"},{"cve_id":"CVE-2026-91740","title":"CVE-2026-91740 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91740","description":"Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":4.3,"published":"2026-09-15T20:41:31.953000Z"},{"cve_id":"CVE-2026-91736","title":"CVE-2026-91736 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91736","description":"Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:31.732000Z"},{"cve_id":"CVE-2026-91708","title":"CVE-2026-91708 (LOW)","link":"https://publiccve.com/cve/CVE-2026-91708","description":"Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)","severity":"LOW","cvss_score":3.1,"published":"2026-09-15T20:41:31.498000Z"},{"cve_id":"CVE-2026-91735","title":"CVE-2026-91735 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91735","description":"Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.3,"published":"2026-09-15T20:41:31.259000Z"},{"cve_id":"CVE-2026-91717","title":"CVE-2026-91717 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91717","description":"Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":5.1,"published":"2026-09-15T20:41:31.030000Z"},{"cve_id":"CVE-2026-91709","title":"CVE-2026-91709 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91709","description":"Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:30.812000Z"},{"cve_id":"CVE-2026-91741","title":"CVE-2026-91741 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91741","description":"Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:30.551000Z"},{"cve_id":"CVE-2026-91733","title":"CVE-2026-91733 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91733","description":"Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.3,"published":"2026-09-15T20:41:30.328000Z"},{"cve_id":"CVE-2026-91747","title":"CVE-2026-91747 (LOW)","link":"https://publiccve.com/cve/CVE-2026-91747","description":"Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)","severity":"LOW","cvss_score":3.1,"published":"2026-09-15T20:41:30.067000Z"},{"cve_id":"CVE-2026-91731","title":"CVE-2026-91731 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91731","description":"Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.8,"published":"2026-09-15T20:41:29.772000Z"},{"cve_id":"CVE-2026-91720","title":"CVE-2026-91720 (MEDIUM)","link":"https://publiccve.com/cve/CVE-2026-91720","description":"Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"MEDIUM","cvss_score":4.7,"published":"2026-09-15T20:41:29.530000Z"},{"cve_id":"CVE-2026-91748","title":"CVE-2026-91748 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91748","description":"Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.3,"published":"2026-09-15T20:41:29.186000Z"},{"cve_id":"CVE-2026-91712","title":"CVE-2026-91712 (HIGH)","link":"https://publiccve.com/cve/CVE-2026-91712","description":"Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"HIGH","cvss_score":8.3,"published":"2026-09-15T20:41:28.953000Z"}]}