CVE-2026-87573

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87556

CVE-2026-87556 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The Chromium project assigned this a Medium security se...

CVE-2026-87562

CVE-2026-87562 affects Google Chrome on Mac prior to version 153.0.8010.36 . The vulnerability is an incorrect reference resolution in the Accessibility component, which could allow a remote attacker to spoof UI elements via a crafted HTML page. Chromium rates the severity as Medium . Remediation...

CVE-2026-87539

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74351

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74350

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87539

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87560

CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page , enabling the bypass of system access restrictions . The Chromium project rated the severity as Me...

CVE-2026-87539

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74344

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87579

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87476

Incorrect authorization in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The vulnerability carries a Medium Chromium security severity with a CVSS v3.1 base score of 6.5 (network vector, user...

CVE-2026-87497

CVE-2026-87497 is an uninitialized resource vulnerability in the Codecs component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to read memory inside the browser sandbox , potentially leaking sensitive data. Chromium rates the se...

CVE-2026-87579

A buffer overflow in WebRTC within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the browser's sandbox by luring a user into visiting a crafted HTML page. The vulnerability is classified as Medium severity by Chromium, while the CVSS 3.1 s...

CVE-2026-87476

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87443

Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87645

CVE-2026-87645 is an improper state validation vulnerability in the Safebrowsing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions . Chromium assigns this a Medium security severity. The fix is inc...

CVE-2026-87577

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74333

Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...