CVE-2026-87560

CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page , enabling the bypass of system access restrictions . The Chromium project rated the severity as Me...

CVE-2026-87476

CVE-2026-87476 is an incorrect authorization flaw in the Loader component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to obtain sensitive information . The Chromium team rates the security severity as Medium . The fix is available i...

CVE-2026-87497

CVE-2026-87497 is an uninitialized resource vulnerability in the Codecs component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to read memory inside the browser sandbox , potentially leaking sensitive data. Chromium rates the se...

CVE-2026-87579

CVE-2026-87579 is a buffer overflow in the WebRTC component of Google Chrome prior to 153.0.8010.36 . A remote attacker can execute arbitrary code inside the Chrome sandbox by serving a crafted HTML page to the victim. The Chromium project rates the severity as Medium . No public exploitation det...

CVE-2026-87577

CVE-2026-87577 is an incorrect authorization vulnerability in the Isolated component of Google Chrome prior to 153.0.8010.36 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy into a privileged page . Chromium classifies the severity as Medium . The fix i...

CVE-2026-87645

CVE-2026-87645 is an improper state validation vulnerability in the Safebrowsing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions . Chromium assigns this a Medium security severity. The fix is inc...

CVE-2026-87466

CVE-2026-87466 is an incorrect authorization flaw in the Workers component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can bypass the web origin policy by serving a crafted HTML page to a victim. The Chromium project rates the security severity as Medium . The fix is to up...

CVE-2026-87603

CVE-2026-87603 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to bypass system access restrictions. The Chromium security team rates the severity as Medium . The fix ...

CVE-2026-87503

Google Chrome on Android prior to 153.0.8010.36 contains an inappropriate implementation in the Downloads component that allows a remote attacker, leveraging social engineering via a crafted HTML page, to bypass system access restrictions . Chromium assigns this a Medium security severity. Remedi...

CVE-2026-87465

An incorrect authorization flaw in the Downloads feature of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium rates the severity as Medium , reflecting the requirement that the ren...

CVE-2026-87434

Google Chrome prior to 153.0.8010.36 contains a missing authorization flaw in its CORS implementation. A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . The issue was fixed in version 153.0.8010.36 , released on...

CVE-2026-87478

CVE-2026-87478 is an observable discrepancy in the Autofill component of Google Chrome prior to version 153.0.8010.36 , rated Medium severity by Chromium. A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from the user. The fix is included in Chrome 153....

CVE-2026-87491

CVE-2026-87491 is an out-of-bounds write in the V8 JavaScript engine of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this flaw via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The vulnerability is classified with a Medium Chromium secur...

CVE-2026-87612

CVE-2026-87612 is a type confusion vulnerability in the V8 JavaScript engine of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . Chromium rates the severity as High . Remedi...

CVE-2026-87558

A use-after-free vulnerability in the Payments component of Google Chrome for Mac (prior to 153.0.8010.36 ) allows a remote attacker to execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. Chromium rates the severity as High . The fix is included in Chrom...

CVE-2026-87536

CVE-2026-87536 is a use after free vulnerability in V8 , the JavaScript engine of Google Chrome . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The Chromium team rated the severity as High . The fix is included in Chrome 153.0.8010....

CVE-2026-87587

CVE-2026-87587 is a use after free vulnerability in the V8 JavaScript engine of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this by serving a crafted HTML page, potentially achieving arbitrary code execution inside the Chrome sandbox . The vulnerabili...

CVE-2026-87639

CVE-2026-87639 is a use after free vulnerability in the WebPackaging component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to potentially execute arbitrary code outside the san...

CVE-2026-87499

An incorrect authorization vulnerability in the Network component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to bypass site isolation using a crafted HTML page. The Chromium project rated the severity as High . The fi...

CVE-2026-87460

A use-after-free vulnerability in the Platform component of Google Chrome (prior to 153.0.8010.36 ) allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The Chromium security severity is rated High . The fix is available in Chrome 153.0.8010.36. N...