Vulnerability-Lookup

WID-SEC-W-2026-2244

Vulnerability from csaf_certbund - Published: 2026-07-08 22:00 - Updated: 2026-07-19 22:00

Summary

Google Chrome/Microsoft Edge: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Chrome ist ein Internet-Browser von Google.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um Code auszuführen und um Sicherheitsmechanismen zu umgehen.

Betroffene Betriebssysteme: - Linux - MacOS X - Windows

CVE-2026-15107

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15108

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15109

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15110

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15111

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15112

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15113

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15114

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15115

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15116

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15117

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15118

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15119

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15120

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15121

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15122

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15123

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15124

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15125

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15126

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15127

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15128

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15129

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15130

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15131

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15132

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

CVE-2026-15133

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Data API builder <150.0.4078.65 Microsoft / Data API builder		<150.0.4078.65
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Google Chrome <150.0.7871.114 Google / Chrome		<150.0.7871.114
Google Chrome <150.0.7871.115 Google / Chrome		<150.0.7871.115

References

11 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
http://chromereleases.googleblog.com/2026/07/stab…	external
https://bodhi.fedoraproject.org/updates/FEDORA-EP…	external
https://security-tracker.debian.org/tracker/DSA-6387-1	external
https://bodhi.fedoraproject.org/updates/FEDORA-EP…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://lists.debian.org/debian-lts-announce/2026…	external
https://lists.opensuse.org/archives/list/security…	external
https://lists.opensuse.org/archives/list/security…	external
https://learn.microsoft.com/en-us/deployedge/micr…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Chrome ist ein Internet-Browser von Google.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um Code auszuf\u00fchren und um Sicherheitsmechanismen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2244 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2244.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2244 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2244"
      },
      {
        "category": "external",
        "summary": "Chrome Stable Channel Update vom 2026-07-08",
        "url": "http://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-EPEL-2026-4F9779F295 vom 2026-07-11",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4f9779f295"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6387 vom 2026-07-12",
        "url": "https://security-tracker.debian.org/tracker/DSA-6387-1"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-EPEL-2026-36FC7F58B7 vom 2026-07-11",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-36fc7f58b7"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-7E82BF89F4 vom 2026-07-12",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-7e82bf89f4"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4677 vom 2026-07-12",
        "url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00019.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2026:0238-1 vom 2026-07-10",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7RUZC4MWFCQKLIBFSFCBKLBPW5W2KS7/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2026:11254-1 vom 2026-07-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F4NQMNT7FY3XRGGINKYFR4EQI2DGYCLW/"
      },
      {
        "category": "external",
        "summary": "Release notes for Microsoft Edge Security Updates vom 2026-07-13",
        "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#july-13-2026"
      }
    ],
    "source_lang": "en-US",
    "title": "Google Chrome/Microsoft Edge: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-07-19T22:00:00.000+00:00",
      "generator": {
        "date": "2026-07-20T08:32:58.119+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2244",
      "initial_release_date": "2026-07-08T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-07-08T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-07-12T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fedora, Debian und openSUSE aufgenommen"
        },
        {
          "date": "2026-07-13T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von openSUSE aufgenommen"
        },
        {
          "date": "2026-07-19T22:00:00.000+00:00",
          "number": "4",
          "summary": "Edge Update aufgenommen"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74178",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c150.0.7871.114",
                "product": {
                  "name": "Google Chrome \u003c150.0.7871.114",
                  "product_id": "T056274"
                }
              },
              {
                "category": "product_version",
                "name": "150.0.7871.114",
                "product": {
                  "name": "Google Chrome 150.0.7871.114",
                  "product_id": "T056274-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:google:chrome:150.0.7871.114"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c150.0.7871.115",
                "product": {
                  "name": "Google Chrome \u003c150.0.7871.115",
                  "product_id": "T056275"
                }
              },
              {
                "category": "product_version",
                "name": "150.0.7871.115",
                "product": {
                  "name": "Google Chrome 150.0.7871.115",
                  "product_id": "T056275-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:google:chrome:150.0.7871.115"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Chrome"
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c150.0.4078.65",
                "product": {
                  "name": "Microsoft Data API builder \u003c150.0.4078.65",
                  "product_id": "T056786"
                }
              },
              {
                "category": "product_version",
                "name": "150.0.4078.65",
                "product": {
                  "name": "Microsoft Data API builder 150.0.4078.65",
                  "product_id": "T056786-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:data_api_builder:150.0.4078.65"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Data API builder"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T055946",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15107",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15107"
    },
    {
      "cve": "CVE-2026-15108",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15108"
    },
    {
      "cve": "CVE-2026-15109",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15109"
    },
    {
      "cve": "CVE-2026-15110",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15110"
    },
    {
      "cve": "CVE-2026-15111",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15111"
    },
    {
      "cve": "CVE-2026-15112",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15112"
    },
    {
      "cve": "CVE-2026-15113",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15113"
    },
    {
      "cve": "CVE-2026-15114",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15114"
    },
    {
      "cve": "CVE-2026-15115",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15115"
    },
    {
      "cve": "CVE-2026-15116",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15116"
    },
    {
      "cve": "CVE-2026-15117",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15117"
    },
    {
      "cve": "CVE-2026-15118",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15118"
    },
    {
      "cve": "CVE-2026-15119",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15119"
    },
    {
      "cve": "CVE-2026-15120",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15120"
    },
    {
      "cve": "CVE-2026-15121",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15121"
    },
    {
      "cve": "CVE-2026-15122",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15122"
    },
    {
      "cve": "CVE-2026-15123",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15123"
    },
    {
      "cve": "CVE-2026-15124",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15124"
    },
    {
      "cve": "CVE-2026-15125",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15125"
    },
    {
      "cve": "CVE-2026-15126",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15126"
    },
    {
      "cve": "CVE-2026-15127",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15127"
    },
    {
      "cve": "CVE-2026-15128",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15128"
    },
    {
      "cve": "CVE-2026-15129",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15129"
    },
    {
      "cve": "CVE-2026-15130",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15130"
    },
    {
      "cve": "CVE-2026-15131",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15131"
    },
    {
      "cve": "CVE-2026-15132",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15132"
    },
    {
      "cve": "CVE-2026-15133",
      "product_status": {
        "known_affected": [
          "T056786",
          "2951",
          "T055946",
          "74178",
          "T056274",
          "T056275"
        ]
      },
      "release_date": "2026-07-08T22:00:00.000+00:00",
      "title": "CVE-2026-15133"
    }
  ]
}

CVE-2026-15107 (GCVE-0-2026-15107)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-10 03:55

Summary

Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/503553615

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15107",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:24.687Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:06.218Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/503553615"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15107",
    "datePublished": "2026-07-08T22:36:06.218Z",
    "dateReserved": "2026-07-08T17:07:38.102Z",
    "dateUpdated": "2026-07-10T03:55:24.687Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15108 (GCVE-0-2026-15108)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:35 – Updated: 2026-07-09 10:36

Summary

Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-190 - Integer overflow

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/515443146

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15108",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T10:36:34.454991Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T10:36:37.839Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "Integer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:35:59.196Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/515443146"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15108",
    "datePublished": "2026-07-08T22:35:59.196Z",
    "dateReserved": "2026-07-08T17:07:38.340Z",
    "dateUpdated": "2026-07-09T10:36:37.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15109 (GCVE-0-2026-15109)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:35 – Updated: 2026-07-09 13:42

Summary

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-457 - Uninitialized Use

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/516899138

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15109",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T13:42:43.391191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T13:42:46.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-457",
              "description": "Uninitialized Use",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:35:59.565Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/516899138"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15109",
    "datePublished": "2026-07-08T22:35:59.565Z",
    "dateReserved": "2026-07-08T17:07:38.723Z",
    "dateUpdated": "2026-07-09T13:42:46.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15110 (GCVE-0-2026-15110)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:35 – Updated: 2026-07-09 10:37

Summary

Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/516948486

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15110",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T10:37:31.303796Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T10:37:34.437Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:35:59.895Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/516948486"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15110",
    "datePublished": "2026-07-08T22:35:59.895Z",
    "dateReserved": "2026-07-08T17:07:39.115Z",
    "dateUpdated": "2026-07-09T10:37:34.437Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15111 (GCVE-0-2026-15111)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-10 03:55

Summary

Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/517508651

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15111",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:32.285Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:00.240Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/517508651"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15111",
    "datePublished": "2026-07-08T22:36:00.240Z",
    "dateReserved": "2026-07-08T17:07:39.516Z",
    "dateUpdated": "2026-07-10T03:55:32.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15112 (GCVE-0-2026-15112)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:35 – Updated: 2026-07-10 03:55

Summary

Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/518006275

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15112",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:28.527Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:35:57.558Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/518006275"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15112",
    "datePublished": "2026-07-08T22:35:57.558Z",
    "dateReserved": "2026-07-08T17:07:39.782Z",
    "dateUpdated": "2026-07-10T03:55:28.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15113 (GCVE-0-2026-15113)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-10 03:55

Summary

Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/520540744

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:35.365Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:00.578Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/520540744"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15113",
    "datePublished": "2026-07-08T22:36:00.578Z",
    "dateReserved": "2026-07-08T17:07:40.096Z",
    "dateUpdated": "2026-07-10T03:55:35.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15114 (GCVE-0-2026-15114)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-10 03:55

Summary

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Out of bounds read and write
CWE-125 - Out-of-bounds Read
CWE-787 - Out-of-bounds Write

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/520565945

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15114",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:31.517Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out of bounds read and write",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:00.919Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/520565945"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15114",
    "datePublished": "2026-07-08T22:36:00.919Z",
    "dateReserved": "2026-07-08T17:07:40.449Z",
    "dateUpdated": "2026-07-10T03:55:31.517Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15115 (GCVE-0-2026-15115)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-09 10:32

Summary

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Insufficient validation of untrusted input

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/520576676

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 3.3,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15115",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T10:32:01.062163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T10:32:24.506Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Insufficient validation of untrusted input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:01.233Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/520576676"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15115",
    "datePublished": "2026-07-08T22:36:01.233Z",
    "dateReserved": "2026-07-08T17:07:40.716Z",
    "dateUpdated": "2026-07-09T10:32:24.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15116 (GCVE-0-2026-15116)

Vulnerability from cvelistv5 – Published: 2026-07-08 22:36 – Updated: 2026-07-10 03:55

Summary

Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/07/sta…
https://issues.chromium.org/issues/522092013

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 150.0.7871.115 , < 150.0.7871.115 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-15116",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T03:55:27.047Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "150.0.7871.115",
              "status": "affected",
              "version": "150.0.7871.115",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T22:36:01.576Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
        },
        {
          "url": "https://issues.chromium.org/issues/522092013"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-15116",
    "datePublished": "2026-07-08T22:36:01.576Z",
    "dateReserved": "2026-07-08T17:07:40.968Z",
    "dateUpdated": "2026-07-10T03:55:27.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

WID-SEC-W-2026-2244

CVE-2026-15107 (GCVE-0-2026-15107)

CVE-2026-15108 (GCVE-0-2026-15108)

CVE-2026-15109 (GCVE-0-2026-15109)

CVE-2026-15110 (GCVE-0-2026-15110)

CVE-2026-15111 (GCVE-0-2026-15111)

CVE-2026-15112 (GCVE-0-2026-15112)

CVE-2026-15113 (GCVE-0-2026-15113)

CVE-2026-15114 (GCVE-0-2026-15114)

CVE-2026-15115 (GCVE-0-2026-15115)

CVE-2026-15116 (GCVE-0-2026-15116)

Tags

Sightings

Nomenclature