CVE-2026-87434

Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87432

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87434

Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87431

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87589

A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...

CVE-2026-87483

A flaw was found in Chromium. Incorrect authorization in the browser on Android allows a remote attacker to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page...

CVE-2026-87652

A flaw was found in Google Chrome's PushAPI. A remote attacker, after compromising the renderer process, could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized...

CVE-2026-87644

A flaw was found in Google Chrome. Incorrect authorization in the Views component could allow a remote attacker, who has compromised the renderer process and used social engineering, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs via a specially...

CVE-2026-87476

An incorrect authorization flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506390077...

CVE-2026-87465

An incorrect authorization flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496616790...

CVE-2026-87432

A flaw was found in Google Chrome. Incorrect authorization in the Navigation component could allow a remote attacker, who has already compromised the renderer process, to spoof user interface UI elements. This can be achieved by providing a specially crafted HTML page, leading to a deceptive user...

CVE-2026-87471

An incorrect authorization flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498869663...

CVE-2026-87544

CVE-2026-87544 affects the Extensions component of Google Chrome prior to version 153.0.8010.36 , where an incorrect authorization flaw allows a remote attacker to bypass system access restrictions into a privileged page using a crafted HTML page. Chromium rated its severity as Low , while the NV...

CVE-2026-87544

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74478

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87544

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87473

Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87575

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87473

CVE-2026-87473 is an incorrect authorization flaw in the FileHandling component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can deliver a crafted HTML page that bypasses system access restrictions. Chromium rates the severity as Low ; NVD assigns a CV...