98495 matches found
EUVD-2026-74428
Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87528
CVE-2026-87528 is a type confusion vulnerability in the Rust code of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. Chromium rates this as Medium se...
CVE-2026-87623
CVE-2026-87623 is an observable discrepancy in the DOM of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering could obtain sensitive information via a crafted HTML page . The underlying cause is a discrepancy in how the DOM is rendered, allowing information leak...
EUVD-2026-74421
Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87455
A use after free vulnerability in the Aura component of Google Chrome (prior to 153.0.8010.36 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium security severity is rated Medium . The fix is available in version 153.0.8010.3...
EUVD-2026-74423
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87566
CVE-2026-87566 is an observable discrepancy in the Layout component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the user's browser. Chromium classifies the severity as Medium . The fix was...
CVE-2026-87632
CVE-2026-87632 is a cross-site scripting (XSS) vulnerability in the SanitizerAPI component of Google Chrome prior to 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to bypass the web origin policy , as classified by Chromium with a Medium security severity. The fix is ava...
CVE-2026-87531
CVE-2026-87531 is an information leak vulnerability in the CORS implementation of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page, bypassing CORS isolation. The Chrom...
EUVD-2026-74413
Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74417
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74409
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74407
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87468
CVE-2026-87468 is an incorrect authorization vulnerability in the Isolated component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass site isolation , a key browser security boundary that prevents cross-site access. The Chromium projec...
CVE-2026-87493
CVE-2026-87493 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by delivering a crafted HTML page to the victim. Chromium rates this as Medium severi...
CVE-2026-87641
CVE-2026-87641 is a race condition in the Browser component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this by serving a crafted HTML page , enabling bypass of system access restrictions . The Chromium security team rates this as Medium severity. ...
EUVD-2026-74401
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87635
Google Chrome versions prior to 153.0.8010.36 contained a UI misrepresentation (squishing) vulnerability in the Payments component. A remote attacker could spoof UI elements by serving a crafted HTML page to a victim, potentially tricking users into interacting with fabricated payment interface e...