17 matches found
CVE-2026-84331
Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-84331
CVE-2026-84331 is an incorrect authorization flaw in the Actor component of Google Chrome prior to version 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Low ; t...
CVE-2026-84331
Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79090
Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79090
CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could craft an HTML page to bypass system access restrictions . Google classifies this as Chromium severity: Low , yet the CNA...
Astra Linux – Vulnerability in Chromium
The use of after-free in the Actor component in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
CVE-2026-17700
An insufficient validation of untrusted input flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517789833...
CVE-2026-13930
An insufficient policy enforcement flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512937764...
CVE-2026-15116
An use after free flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522092013...
Astra Linux – Vulnerability in Chromium
The use of after free in the Actor component in Google Chrome before version 150.0.7871.115 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
CVE-2026-15116
Google Chrome CVE-2026-15116 describes a use-after-free in the Actor component that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected software: Google Chrome, prior to version 150.0.7871.115. Root cause: use-after-free in Actor with memory cor...
The vulnerability of the Actor component in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
CVE-2026-11018
An insufficient policy enforcement flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497342466...
CVE-2026-10954
An use after free flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506150628...
Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-10954
Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from insufficient policy execution in the Actor component, which could allow remote attackers to bypass navigation restrictions...