CVE-2026-95278

A flaw was found in chromium-browser. Due to missing authorization in the WakeLock component, a remote attacker who has already compromised the browser's renderer process can bypass system access restrictions. An attacker could exploit this vulnerability by convincing a user to open a specially...

CVE-2026-95385

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95376

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95326

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95290

Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95292

Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-95326

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a security flaw caused by incomplete cleanup in Bluetooth . A remote attacker could leverage social engineering to bypass system access restrictions by navigating the victim to a crafted HTML page. This vulnerability is categorized w...

EUVD-2026-89159

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-89156

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95385

Google Chrome on Windows prior to version 154.0.8037.57 is vulnerable to a security issue in PlatformIntegration . An inappropriate implementation allowed a remote attacker to leverage social engineering to bypass system access restrictions via a crafted HTML page . The Chromium security severity...

CVE-2026-95326

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95385

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95292

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw within the Safebrowsing component. A remote attacker can exploit this vulnerability by sending crafted network traffic to bypass system access restrictions. This issue has been addressed in the stable ...

CVE-2026-95278

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in WakeLock . This issue allows a remote attacker who has compromised the renderer process to bypass system access restrictions by leveraging a crafted HTML page . Remediation is available in version 154....

EUVD-2026-89135

Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95290

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in NFC . A remote attacker who has compromised the renderer process can bypass system access restrictions by leveraging a crafted HTML page . This vulnerability is assigned a Medium security severity. Rem...