CVE-2026-87506

A flaw was found in Google Chrome's WebUI. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to privilege elevation, allowing the attacker to execute arbitrary code outside o...

CVE-2026-87553

A flaw was found in SiteIsolation in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when the attacker provides a specially crafted HTML page, leadi...

CVE-2026-87618

A flaw was found in Google Chrome. This vulnerability involves incorrect reference resolution within the browser's Storage component. A remote attacker, who has already compromised the browser's renderer process, could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2026-87634

A flaw was found in Chromium. A use-after-free vulnerability exists in the WebPackaging component. A remote attacker could exploit this by enticing a user to open a specially crafted HTML page. This could potentially lead to arbitrary code execution outside of the sandbox...

CVE-2026-87572

A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87514

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87547

An incorrect reference resolution flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497111188...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87533

An use after free flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521620916...

CVE-2026-87554

A flaw was found in Chromoting. This vulnerability, a race condition, allows a local attacker to execute arbitrary code outside of the sandbox environment. By exploiting this flaw with a local program, an attacker could gain unauthorized control over the affected system...

CVE-2026-87510

A flaw was found in chromium-browser's FileAPI component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87467

A flaw was found in the Updater component of Chromium. A local attacker could exploit a race condition to potentially execute arbitrary code outside of the sandbox environment. This could lead to a complete compromise of the affected system...

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87487

A flaw was found in the FileSystem component of Chromium. This missing authorization vulnerability could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside of the sandbox. This exploitation is...

CVE-2026-87481

A flaw was found in WebView in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the security sandbox. This can be achieved by enticing a user to visit a specially...

CVE-2026-87650

Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...