| CVE-2026-16356 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16355 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16369 |
Integer overflow in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16367 |
Sandbox escape due to invalid pointer in the Disability Access APIs component
|
10.0
Critical
|
Jul 21, 2026 |
| CVE-2026-16368 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16353 |
Invalid pointer in the DOM: Bindings (WebIDL) component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16363 |
JIT miscompilation in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16364 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16352 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16351 |
Sandbox escape due to use-after-free in the DOM: Navigation component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16350 |
Incorrect boundary conditions in the Audio/Video: cubeb component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16349 |
Same-origin policy bypass in the DOM: Navigation component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-12316 |
Mitigation bypass in the DOM: Security component
|
9.1
Critical
|
Jun 16, 2026 |
| CVE-2026-12315 |
Mitigation bypass in the DOM: Security component
|
9.1
Critical
|
Jun 16, 2026 |
| CVE-2026-12304 |
Same-origin policy bypass in the Networking: Cookies component
|
9.1
Critical
|
Jun 16, 2026 |
| CVE-2026-12297 |
Sandbox escape due to incorrect boundary conditions in the Networking component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12296 |
Sandbox escape in the Security: Process Sandboxing component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12295 |
Sandbox escape in the DOM: Navigation component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12294 |
Sandbox escape in the DOM: Workers component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12293 |
Use-after-free in the Graphics: WebGPU component
|
9.8
Critical
|
Jun 16, 2026 |
| CVE-2026-8959 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-8956 |
Integer overflow in the Networking: JAR component
|
9.8
Critical
|
May 19, 2026 |
| CVE-2026-8953 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-8950 |
Same-origin policy bypass in the Networking: HTTP component
|
9.3
Critical
|
May 19, 2026 |
| CVE-2026-8948 |
Same-origin policy bypass in the DOM: Networking component
|
9.1
Critical
|
May 19, 2026 |