24061 matches found
CVE-2026-87434
Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87516
A flaw was found in Google Chrome. An observable discrepancy in navigation allowed a remote attacker to leak cross-origin data. This was achieved by crafting a malicious HTML page. The flaw could lead to the disclosure of sensitive information from other origins...
CVE-2026-87531
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS by using a specially crafted HTML page. This vulnerability allows the attacker to obtain sensitive data from other origins,...
CVE-2026-87461
A flaw was found in Chromium, specifically in its Core component. A remote attacker could exploit this vulnerability by using a specially crafted Chrome extension. This could lead to the unauthorized disclosure of sensitive cross-origin data...
CVE-2026-87652
A flaw was found in Google Chrome's PushAPI. A remote attacker, after compromising the renderer process, could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized...
CVE-2026-87573
A flaw was found in Google Chrome. Improper input validation within the Network component allows a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. A successful exploit could lead to unauthorized access...
CVE-2026-87571
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
EUVD-2026-74474
Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87608
Google Chrome prior to 153.0.8010.36 is affected by an improper certificate validation vulnerability in FedCM (Federated Credential Management). A remote attacker can leverage social engineering and crafted network traffic to bypass the web origin policy , resulting in a confidentiality impact (C...
CVE-2026-87571
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
EUVD-2026-74473
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87551
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87608
Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87608
Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
EUVD-2026-74471
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87551
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-87571
CVE-2026-87571 is an improper certificate validation vulnerability in the Loader component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could use crafted network traffic to bypass the web origin policy , resulting in low confidenti...
CVE-2026-87551
CVE-2026-87551 addresses an improper certificate validation flaw in the CORS (Cross-Origin Resource Sharing) mechanism of Google Chrome prior to version 153.0.8010.36 . A remote attacker leveraging social engineering could craft network traffic to bypass the web origin policy , leading to a limit...