CVE-2026-87563

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

CVE-2026-87451 is an information leak in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data via a crafted HTML page. The vulnerability is rated Medium by Chromium and carries a CVSS 3....

EUVD-2026-74381

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74379

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

CVE-2026-87574 is an information leak in the ServiceWorker component of Google Chrome prior to 153.0.8010.36 . A remote attacker can exploit the flaw by delivering a crafted HTML page that causes the ServiceWorker to expose cross-origin data to the attacker, resulting in a low confidentiality imp...

CVE-2026-87495

CVE-2026-87495 is an information leak in the Scroll component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , resulting in a low confidentiality impact . Chromium rates this ...

EUVD-2026-74378

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74363

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

A medium-severity vulnerability in the Navigation component of Google Chrome prior to 153.0.8010.36 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is described as an observable discrepancy in the Navigation subsystem. The CVSS v3.1 base score is 4.3 (AV...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

CVE-2026-87452 is an incorrect authorization flaw in the GPU component of Google Chrome on Mac prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page. The vulnerability carries a...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...