98620 matches found
CVE-2026-87501
CVE-2026-87501 is a UI misrepresentation vulnerability in the Passwords component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page that spoofs UI elements within the password management interface, potentially deceiving users into...
CVE-2026-87507
A UI misrepresentation vulnerability in the Downloads component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to spoof UI elements via a crafted HTML page. The vulnerability is rated Medium severity by the Chromium team. Users are advise...
EUVD-2026-74366
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74362
Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74365
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74357
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74356
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87556
CVE-2026-87556 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The Chromium project assigned this a Medium security se...
CVE-2026-87562
CVE-2026-87562 affects Google Chrome on Mac prior to version 153.0.8010.36 . The vulnerability is an incorrect reference resolution in the Accessibility component, which could allow a remote attacker to spoof UI elements via a crafted HTML page. Chromium rates the severity as Medium . Remediation...
EUVD-2026-74351
Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87539
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87539
Google Chrome prior to 153.0.8010.36 is affected by an observable discrepancy in the Network component. A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , representing a Medium severity issue per Chromium's rating. The fix is available in version 153.0.8010...
EUVD-2026-74350
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87560
CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page , enabling the bypass of system access restrictions . The Chromium project rated the severity as Me...
CVE-2026-87521
CVE-2026-87521 is an information leak in WebMCP in Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page. The Chromium security team assigned this a Medium severity rating....
EUVD-2026-74344
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87579
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87497
CVE-2026-87497 is an uninitialized resource vulnerability in the Codecs component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to read memory inside the browser sandbox , potentially leaking sensitive data. Chromium rates the se...