23876 matches found
CVE-2026-87493
CVE-2026-87493 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by delivering a crafted HTML page to the victim. Chromium rates this as Medium severi...
EUVD-2026-74406
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87622
CVE-2026-87622 is a missing authorization vulnerability in FedCM (Federated Credential Management) within Google Chrome prior to version 153.0.8010.36 . The flaw allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. Chromium assigned a Medium security severi...
EUVD-2026-74389
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74375
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87441
This vulnerability affects Google Chrome versions prior to 153.0.8010.36 , specifically in the Downloads component. The root cause is a missing authorization flaw that allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension . Chromium rates the security sever...
CVE-2026-87534
Missing authorization in the WebView component of Google Chrome on Android versions prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to bypass system access restrictions via crafted network traffic. The Chromium security severity is rated Medium . The fix is to upd...
EUVD-2026-74356
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74354
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-87556
CVE-2026-87556 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The Chromium project assigned this a Medium security se...
CVE-2026-87513
CVE-2026-87513 is a missing authorization vulnerability in the ControlledFrame component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can deliver a crafted HTML page that bypasses system access restrictions. The Chromium project as...
EUVD-2026-74350
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74348
Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87560
CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page , enabling the bypass of system access restrictions . The Chromium project rated the severity as Me...
EUVD-2026-74345
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87475
CVE-2026-87475 is a Missing Authorization vulnerability in the Omnibox component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering, could bypass system access restrictions and gain access to a privileged page by delivering a crafted HT...
CVE-2026-87443
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87443
Google Chrome prior to 153.0.8010.36 is affected by a missing authorization vulnerability in the Actor component. A remote attacker could obtain sensitive information by luring a user into visiting a crafted HTML page. The Chromium project rates this as Medium severity, with a CVSS 3.1 score of 6...
