CVE-2026-87649

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...

CVE-2026-87657

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542146471...

CVE-2026-87655

A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...

CVE-2026-87515

An incorrect authorization flaw was found in the FileAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497093426...

CVE-2026-87472

A flaw was found in chromium-browser. Improper input validation in the Federated Credential Management FedCM component of Google Chrome allows a remote attacker, who has already compromised the renderer process, to spoof user interface UI elements. This can be achieved by providing a specially...

CVE-2026-87495

A flaw was found in chromium-browser. A remote attacker, who has compromised the renderer process, could exploit a vulnerability in the Scroll component by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data...

CVE-2026-87616

An improper initialization flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520469117...

CVE-2026-87514

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...

CVE-2026-87491

An out of bounds write flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=543557673...

CVE-2026-87468

An incorrect authorization flaw was found in the Isolated component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532931962...

CVE-2026-87636

A type confusion flaw was found in the XML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495541478...

CVE-2026-87612

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554236352...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87510

A flaw was found in chromium-browser's FileAPI component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87498

A missing authorization flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552413517...

CVE-2026-87588

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495515356...

CVE-2026-87561

A flaw was found in chromium-browser. A remote attacker could exploit incorrect authorization in Web Authentication by using a specially crafted Chrome extension. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access or information disclosure...

CVE-2026-87645

An improper state validation flaw was found in the Safebrowsing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502611474...

CVE-2026-87541

An information leak flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517156678...

CVE-2026-87542

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the input handling, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, an attacker could bypass security measures and run malicious code within the...