3986 matches found
CVE-2026-87563
A flaw was found in Paint in Google Chrome. An origin validation error allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This vulnerability could lead to information disclosure...
CVE-2026-87658
A flaw was found in Google Chrome's Extensions component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques and a specially crafted Chrome extension. This could lead to an information leak, allowing the attacker to obtain sensitive data from other...
CVE-2026-87511
A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...
CVE-2026-87611
A flaw was found in Google Chrome. Missing authorization in the FileSystem component allows a remote attacker, who has already compromised the renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-87651
A flaw was found in Google Chrome's Paint component. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to information from other web origins...
CVE-2026-87539
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosure...
CVE-2026-87658
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
DEBIAN-CVE-2026-87658
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
DEBIAN-CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87611
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87611
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87574
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87574
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...