CVEs
esc

CVEs

Browser vulnerabilities I reported, as credited in the vendors’ security advisories.

5 CVEsGoogle Chrome × 3Apple WebKit × 2

  1. CVE-2026-95301high

    Missing authorization in Extensions

    Google Chrome · Fixed in 154.0.8037.57

    CVE Record ↗Chrome Releases ↗

  2. CVE-2026-93379high

    Incorrect authorization in ORB

    Google Chrome · Fixed in 153.0.8010.52

    CVE Record ↗Chrome Releases ↗

  3. CVE-2026-87651high

    Incorrect authorization in Paint

    Google Chrome · Fixed in 153.0.8010.36

    CVE Record ↗Chrome Releases ↗

  4. CVE-2026-64783

    Use after free in WebKit

    Safari, iOS, iPadOS, macOS · Fixed in Safari 26.6, iOS 26.6

    CVE Record ↗Apple Security ↗

  5. CVE-2026-64718

    Use after free in WebKit Canvas

    Safari, iOS, iPadOS, macOS · Fixed in Safari 26.6, iOS 26.6

    CVE Record ↗Apple Security ↗