84496 matches found
CVE-2026-87543
A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...
CVE-2026-87519
A flaw was found in Safebrowsing. This incorrect authorization vulnerability could allow a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page...
CVE-2026-87443
A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...
CVE-2026-87475
A missing authorization flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507225626...
CVE-2026-87493
A flaw was found in chromium-browser. Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...
CVE-2026-87452
An incorrect authorization flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513524705...
CVE-2026-87552
A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...
CVE-2026-87580
A flaw was found in Google Chrome. An incorrect authorization vulnerability in WebAppInstalls could allow a remote attacker to bypass site isolation. This exploitation requires the attacker to first compromise the renderer process and then leverage social engineering through a crafted HTML page...
CVE-2026-87540
A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...
CVE-2026-87557
A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...
CVE-2026-87431
A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...
CVE-2026-87515
A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...
CVE-2026-87556
A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...
CVE-2026-87537
A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...
CVE-2026-87450
A flaw was found in Google Chrome. This incorrect authorization vulnerability in Permissions allows a remote attacker, by leveraging social engineering and a crafted Chrome extension, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...
CVE-2026-87468
An incorrect authorization flaw was found in the Isolated component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532931962...
CVE-2026-87606
A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...
CVE-2026-87603
A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this missing authorization vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorize...
CVE-2026-87466
A flaw was found in Chromium. Incorrect authorization within the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actio...