Veille CVE

Semaine du 20 juillet au 26 juillet 2026

4 CVE

Critique 3 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « google android » ✕
  1. CVE-2026-16424 9.6 Critique

    Google Chrome

    Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  2. CVE-2026-16419 9.6 Critique

    Google Chrome

    Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  3. CVE-2026-15432 5.9 Moyenne

    Google Tink-Java · Google Tink-Android · Google tink java

    When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in turn could allow to find a correct tag bytewise.

  4. CVE-2026-15900 9.6 Critique

    Google Chrome

    Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)