98861 matches found
CVE-2026-87513
Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87521
Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to obtain cross-origin data via a crafted HTML page. The vulnerability requires the renderer to be compromised first, making it a secondary exploit primiti...
CVE-2026-87539
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87560
CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by serving a crafted HTML page , enabling them to bypass system access restrictions . The NVD-assigned CVSS 3.1 score is 4.3 (Medium)...
EUVD-2026-74344
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87497
CVE-2026-87497 is an uninitialized resource vulnerability in the Codecs component of Google Chrome prior to version 153.0.8010.36 , allowing a remote attacker to read memory inside the sandbox via a crafted HTML page. The Chromium security team rates this as Medium severity with a CVSS v3.1 score...
CVE-2026-87476
Incorrect authorization in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The vulnerability carries a Medium Chromium security severity with a CVSS v3.1 base score of 6.5 (network vector, user...
CVE-2026-87579
A buffer overflow in WebRTC within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the browser's sandbox by luring a user into visiting a crafted HTML page. The vulnerability is classified as Medium severity by Chromium, while the CVSS 3.1 s...
CVE-2026-87579
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87476
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74333
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87443
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74337
Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87577
Google Chrome versions prior to 153.0.8010.36 are affected by an incorrect authorization flaw in the Isolated component. A remote attacker can leverage a crafted HTML page to bypass the web origin policy and reach a privileged page, resulting in a limited confidentiality impact. The vulnerability...
CVE-2026-87577
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87645
CVE-2026-87645 is an improper state validation flaw in the Safebrowsing component of Google Chrome prior to 153.0.8010.36 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions. The Chromium project rates the severity as Medium , with NVD assigning a CVSS 3.1 ...
CVE-2026-87449
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87645
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87466
CVE-2026-87466 is an incorrect authorization flaw in Service Workers within Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can deliver a crafted HTML page that causes a bypass of the web origin policy , potentially allowing unauthorized cross-origin access with low ...