CVEs 29

CVE Component Class Severity ITW Fix RCA
CVE-2026-3913 WebML OOB Critical — ● ✓
CVE-2026-3914 WebML Integer Overflow High — ● ✓
CVE-2026-3915 WebML OOB High — ● ✓
CVE-2026-3916 Web Speech OOB High — ● ✓
CVE-2026-3917 Agents UAF High — ● ✓
CVE-2026-3918 WebMCP UAF High — ● ✓
CVE-2026-3919 Extensions UAF High — ● ✓
CVE-2026-3920 WebML OOB High — ● ✓
CVE-2026-3921 TextEncoding UAF High — ● ✓
CVE-2026-3922 MediaStream UAF High — ● ✓
CVE-2026-3923 WebMIDI UAF High — ● ✓
CVE-2026-3924 WindowDialog UAF High — ● ✓
CVE-2026-3925 LookalikeChecks Spoofing Medium — ● ✓
CVE-2026-3926 V8 OOB Medium — ● ✓
CVE-2026-3927 PictureInPicture Spoofing Medium — ● ✓
CVE-2026-3928 Extensions Policy Bypass Medium — ● ✓
CVE-2026-3929 ResourceTiming Info Disclosure Medium — ● ✓
CVE-2026-3930 Navigation Logic Error Medium — ● ✓
CVE-2026-3931 Skia OOB Medium — ● ✓
CVE-2026-3932 PDF Policy Bypass Medium — ● ✓
CVE-2026-3934 ChromeDriver Policy Bypass Medium — — —
CVE-2026-3935 WebAppInstalls Spoofing Medium — ● ✓
CVE-2026-3936 WebView UAF Medium — ● ✓
CVE-2026-3937 Downloads Spoofing Low — ● ✓
CVE-2026-3938 Clipboard Policy Bypass Low — ● ✓
CVE-2026-3939 PDF Policy Bypass Low — ● ✓
CVE-2026-3940 DevTools Policy Bypass Low — ● ✓
CVE-2026-3941 DevTools Policy Bypass Low — ● ✓
CVE-2026-3942 PictureInPicture Spoofing Low — ● ✓