This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Google Chrome fixes 429 vulnerabilities
Google fixes 429 vulnerabilities in Google Chrome and other Chromium-based web browsers. Google fixed the vulnerabilities in version 149.0.7827.53 for Chrome on Linux and in version 149.0.7827.53/54 for Chrome on Windows/Mac. Selected vulnerabilities are described below; the remaining ones can be found at [1]. Microsoft released Edge version 149.0.4022.52, which contains the latest security fixes. The list of related vulnerabilities has not yet been published [2].
An unauthenticated remote attacker is able, via a specially crafted HTML page, to read and write beyond the bounds of allocated memory, which may lead to a browser sandbox escape [1].
The vulnerability is present in products:
- Windows:Google Chrome; <149.0.7827.53
- macOS:Google Chrome; <149.0.7827.54
- Linux:Google Chrome; <149.0.7827.53
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
More information:
- CVE-2026-10881 at cve.org, NVD
- CVE-2026-10886 at cve.org, NVD
- CVE-2026-10892 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
- CWE-787: Out-of-bounds Write at cwe.mitre.org
The vulnerability was publicly disclosed 2. 6. 2026.
An unauthenticated remote attacker is able to abuse a pointer to memory that has already been freed, which, via a specially crafted HTML page, may lead to an application crash, unauthorized data modification or potentially code execution; the attack requires user interaction [1].
The vulnerability is present in products:
- Windows:Google Chrome; <149.0.7827.53
- macOS:Google Chrome; <149.0.7827.54
- Linux:Google Chrome; <149.0.7827.53
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2026-10882 at cve.org, NVD
- CVE-2026-10885 at cve.org, NVD
- CVE-2026-10893 at cve.org, NVD
- CVE-2026-10895 at cve.org, NVD
- CVE-2026-10896 at cve.org, NVD
- CWE-416: Use After Free at cwe.mitre.org
The vulnerability was publicly disclosed 2. 6. 2026.
An unauthenticated remote attacker with an already compromised renderer process is able to abuse a pointer to memory that has already been freed, which, via a specially crafted HTML page, could potentially lead to a sandbox bypass; the attack requires user interaction [1].
The vulnerability is present in products:
- Windows:Google Chrome; <149.0.7827.53
- macOS:Google Chrome; <149.0.7827.54
- Linux:Google Chrome; <149.0.7827.53
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
More information:
- CVE-2026-10884 at cve.org, NVD
- CVE-2026-10889 at cve.org, NVD
- CVE-2026-10894 at cve.org, NVD
- CVE-2026-10898 at cve.org, NVD
- CWE-416: Use After Free at cwe.mitre.org
The vulnerability was publicly disclosed 2. 6. 2026.
Links
By CESNET, z.s.p.o. Henrieta Paločková on 8. 6. 2026.