CVE-2026-87545

Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87459

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87592

Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

CVE-2026-87595 is a server-side request forgery (SSRF) vulnerability in Google Chrome (Mobile), affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated L...

EUVD-2026-74447

Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74446

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87620

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74448

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74451

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74430

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87653

CVE-2026-87653 is a UI misrepresentation vulnerability in the FullScreen component of Google Chrome on Windows prior to version 153.0.8010.36 . A remote attacker could exploit it via a crafted HTML page to spoof UI elements , potentially deceiving users into interacting with malicious interfaces ...

CVE-2026-87610

CVE-2026-87610 is an incorrect authorization flaw in the Omnibox component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit the flaw by serving a crafted HTML page to a user, bypassing system access restrictions to gain entry into a privileged page. The Chromium s...

CVE-2026-87634

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74428

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74421

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87623

This Medium -severity vulnerability affects the DOM (Document Object Model) in Google Chrome prior to 153.0.8010.36 . An observable discrepancy in the DOM allows a remote attacker, leveraging social engineering , to obtain sensitive information via a crafted HTML page. The CVSS v3.1 score is 6.5 ...

CVE-2026-87566

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87455

A use-after-free vulnerability in the Aura component of Google Chrome prior to 153.0.8010.36 allows a remote attacker, via a crafted HTML page, to potentially execute arbitrary code outside the sandbox. Chromium rated this Medium severity, while the CNA-assigned CVSS 3.1 score is 9.6 (Critical) ,...

CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87566

An observable discrepancy in the Layout component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information by convincing a user to open a crafted HTML page . The Chromium security team rated the severity as Medium , with a CVSS 3.1 base score of 5.3 (network...