CVE-2026-87451

A flaw was found in Google Chrome. This information leak vulnerability in the Downloads component allows a remote attacker, who has already compromised the browser's renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87507

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to user interface UI misrepresentation within the Downloads section, allowing the attacker to...

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87532

A flaw was found in Google Chrome's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...

CVE-2026-87584

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By sending a specially crafted HTML page, an attacker could gain unauthorized access to sensitive functionalities within the browser's WebUI...

CVE-2026-87496

A flaw was found in Google Chrome. A remote attacker, through social engineering, could present a specially crafted HTML page to spoof user interface UI elements. This UI misrepresentation could deceive users, potentially leading to information disclosure or unintended actions...

CVE-2026-87596

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leading to...

CVE-2026-87430

CVE-2026-87430 is a buffer overflow in the WebRTC component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can potentially execute arbitrary code inside the browser sandbox by delivering a crafted HTML page. The vulnerability is rated Low severity by the Chromium...

CVE-2026-87437

CVE-2026-87437 is an information leak vulnerability in the Frames component of Google Chrome versions prior to 153.0.8010.36 . A remote attacker could exploit it by delivering a crafted HTML page , allowing them to leak sensitive information from the browser. Chromium assigns it a Low security se...

CVE-2026-87490

CVE-2026-87490 is an information leak in the Transactions Platform component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain sensitive information by serving a crafted HTML page to the user. Chromium assigns this a Low security severity. The fix is in...

CVE-2026-87523

CVE-2026-87523 is a race condition in the DataTransfer component of Google Chrome prior to 153.0.8010.36 . The flaw allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page . Chromium assigned a Low security severity to this issue. The fix is...

CVE-2026-87617

A use after free vulnerability exists in DevTools within Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can execute arbitrary code inside the sandbox by delivering a crafted HTML page. Chromium rates the severity as Low , reflecting the need for social engi...

CVE-2026-87565

CVE-2026-87565 is an information leak in the Passwords component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker can leak sensitive password information by serving a crafted HTML page to a victim. Chromium classifies the security severity as Low . The f...

CVE-2026-87595

CVE-2026-87595 is a server-side request forgery (SSRF) vulnerability in Google Chrome (Mobile), affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated L...

CVE-2026-87653

Google Chrome on Windows is affected by a UI misrepresentation vulnerability in the FullScreen component prior to version 153.0.8010.36 . A remote attacker could exploit this by serving a crafted HTML page to spoof UI elements, rated Low severity by Chromium. The fix is available in Chrome stable...

CVE-2026-87610

CVE-2026-87610 is an incorrect authorization flaw in the Omnibox component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit the flaw by serving a crafted HTML page to a user, bypassing system access restrictions to gain entry into a privileged page. The Chromium s...

CVE-2026-87623

CVE-2026-87623 is an observable discrepancy in the DOM of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering could obtain sensitive information via a crafted HTML page . The underlying cause is a discrepancy in how the DOM is rendered, allowing information leak...

CVE-2026-87455

A use after free vulnerability in the Aura component of Google Chrome (prior to 153.0.8010.36 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium security severity is rated Medium . The fix is available in version 153.0.8010.3...

CVE-2026-87566

CVE-2026-87566 is an observable discrepancy in the Layout component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the user's browser. Chromium classifies the severity as Medium . The fix was...