CVE-2026-87452

An incorrect authorization flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513524705...

CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

CVE-2026-87580

A flaw was found in Google Chrome. An incorrect authorization vulnerability in WebAppInstalls could allow a remote attacker to bypass site isolation. This exploitation requires the attacker to first compromise the renderer process and then leverage social engineering through a crafted HTML page...

CVE-2026-87540

A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

CVE-2026-87515

A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

CVE-2026-87450

A flaw was found in Google Chrome. This incorrect authorization vulnerability in Permissions allows a remote attacker, by leveraging social engineering and a crafted Chrome extension, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...

CVE-2026-87468

An incorrect authorization flaw was found in the Isolated component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532931962...

CVE-2026-87606

A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...

CVE-2026-87603

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this missing authorization vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorize...

CVE-2026-87466

A flaw was found in Chromium. Incorrect authorization within the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actio...

CVE-2026-87499

An incorrect authorization flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553118043...

CVE-2026-87498

A missing authorization flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552413517...

CVE-2026-87561

A flaw was found in chromium-browser. A remote attacker could exploit incorrect authorization in Web Authentication by using a specially crafted Chrome extension. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access or information disclosure...

CVE-2026-87610

A flaw was found in Omnibox in Google Chrome. A remote attacker could exploit an incorrect authorization vulnerability by sending a specially crafted HTML page. This could allow the attacker to bypass system access restrictions and gain access to a privileged page...

CVE-2026-87511

A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...

CVE-2026-87513

A flaw was found in ControlledFrame in Chromium. A remote attacker could leverage social engineering techniques to exploit a missing authorization vulnerability. By tricking a user into interacting with a specially crafted HTML page, the attacker could bypass system access restrictions...