4304 matches found
CVE-2026-87451
CVE-2026-87451 is an information leak in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data via a crafted HTML page. The vulnerability is rated Medium by Chromium and carries a CVSS 3....
EUVD-2026-74381
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87451
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87451
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74375
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74376
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87441
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87441
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87441
CVE-2026-87441 is a missing authorization vulnerability in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker can leverage a crafted Chrome extension to bypass system access restrictions, resulting in a high integrity impact without confidentiality or availability...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87441
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87549
CVE-2026-87549 is an incomplete cleanup vulnerability in the Downloads component of Google Chrome prior to version 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by serving a crafted HTML page. The NVD scores it CVSS 3.1: 6.5 (Medium) with a ...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87649
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87649
CVE-2026-87649 is a UI misrepresentation vulnerability in the Downloads component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could use a crafted HTML page to bypass system access restrictions. User interaction is required (the...
CVE-2026-87655
CVE-2026-87655 is a clickjacking vulnerability in the Downloads component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could spoof UI elements via a crafted HTML page. The Chromium security severity is rated Medium , with a CVSS...
EUVD-2026-74369
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74371
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...