CVE-2026-87563

CVE-2026-87563 is an origin validation error in Paint within Google Chrome , affecting versions prior to 153.0.8010.36 . The flaw allowed a remote attacker to obtain cross-origin data by serving a crafted HTML page to a victim. The Chromium security team rated this as Medium severity. The fix is ...

EUVD-2026-74410

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

CVE-2026-87451 is an information leak in the Downloads component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page. Chromium assigned this vulnerability a Medium sev...

EUVD-2026-74381

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

CVE-2026-87495 is an information leak in the Scroll component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , breaking the same-origin policy isolation within the com...

CVE-2026-87574

CVE-2026-87574 is an information leak in the ServiceWorker component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain cross-origin data by convincing a user to open a crafted HTML page . Chromium rated the severity as Medium . The fix is included in Ch...

EUVD-2026-74379

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74378

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

An observable discrepancy in the Navigation component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The flaw was classified as Medium severity by Chromium. The fix is included in the stable channel update shipped on 20...

CVE-2026-87452

CVE-2026-87452 is an incorrect authorization vulnerability in the GPU component of Google Chrome on Mac (versions prior to 153.0.8010.36 ). A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data via a crafted HTML page. The Chromium security ...

EUVD-2026-74363

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74362

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74352

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74351

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87539

Google Chrome prior to 153.0.8010.36 is affected by an observable discrepancy in the Network component. A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , representing a Medium severity issue per Chromium's rating. The fix is available in version 153.0.8010...

CVE-2026-87521

CVE-2026-87521 is an information leak in WebMCP in Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page. The Chromium security team assigned this a Medium severity rating....

CVE-2026-87642

CVE-2026-87642 is a Medium-severity vulnerability in Google Chrome 's WebGL component, caused by an uninitialized resource . A remote attacker can exploit it via a crafted HTML page to leak cross-origin data . The fix is shipped in Chrome 153.0.8010.36 ; users on earlier versions should upgrade. ...

EUVD-2026-74331

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74312

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87658

CVE-2026-87658 is an information disclosure vulnerability in the Extensions component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could install a crafted Chrome extension to obtain cross-origin data from the user's browser. The...