CVE-2026-87576

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could allow the attacker to read memory outside of the sandbox,...

CVE-2026-87555

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a crafted HTML page. This could allow the attacker to read memory outside of the browser's security sandbox, leading to informatio...

CVE-2026-87520

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87463

Google Chrome on Android prior to version 153.0.8010.36 is affected by an incorrect authorization flaw in the Certificate component. A remote attacker can potentially spoof the address bar via crafted network traffic, which may mislead users about the identity of a site they are visiting. The fla...

EUVD-2026-74398

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87555

CVE-2026-87555 is an uninitialized resource vulnerability in the GPU component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . The flaw allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. Chromium rates the security severity as ...

EUVD-2026-74358

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74343

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87503

Google Chrome on Android prior to 153.0.8010.36 contains an inappropriate implementation in the Downloads component that allows a remote attacker, leveraging social engineering via a crafted HTML page, to bypass system access restrictions . Chromium assigns this a Medium security severity. Remedi...

EUVD-2026-74321

Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74528

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74514

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

EUVD-2026-74500

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87438

Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-87488

Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-88676

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88655

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88740

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88665

Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-85044

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...