CVE-2026-87565: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87458: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87651: Incorrect Authorization

Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-87501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium...

PT-2026-88723

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the DOM Document Object Model, which is the programming interface for HTML and XML documents, allows a remote attacker to obtain sensitive information. This...

PT-2026-88735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Payments allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...

PT-2026-88696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...

PT-2026-88592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in DevTools allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. The sandbox is a security mechanism...

PT-2026-88551

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Downloads component. A remote attacker who has compromised the renderer process can obtain cross-origin data by using a crafted HTML page...

PT-2026-88751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-88629

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A numeric truncation error in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-88659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome t...

PT-2026-88660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-88590

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists within the Transactions Platform. A remote attacker can obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-88535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the ControlledFrame component. A remote attacker who has already compromised the renderer process can obtain sensitive information by using a specially...

PT-2026-88749

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML pag...

ROS-20260908-73-0083

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-88562

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing identity provider accounts allows a remote attacker to...

PT-2026-88537

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in Frames that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...