EUVD-2026-74444

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87511

A missing authorization flaw in the DevTools component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive cross-origin data via a crafted Chrome extension. Chromium rated the severity as Low , with a CVSS 3.1 score of 4.3 (Medium) . The vulnerability requires us...

CVE-2026-87543

Google Chrome prior to 153.0.8010.36 contained a missing authorization flaw in the Core component. A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass site isolation , a key sandboxing boundary in Chrome's multi-process architectur...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87522

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-87522

CVE-2026-87522 is a missing authorization vulnerability in the WebView component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can potentially bypass system access restrictions via crafted network traffic. Chromium rates ...

CVE-2026-87522

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

EUVD-2026-74433

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87429

CVE-2026-87429 is a missing authorization flaw in the ServiceWorker component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass system access restrictions . Chromium rates the severity as...

CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87431

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-74407

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87493

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87493

CVE-2026-87493 is a missing authorization flaw in the FileSystem component of Google Chrome prior to version 153.0.8010.36 . A remote attacker, leveraging social engineering, can bypass system access restrictions by serving a crafted HTML page. The CVSS 3.1 score is 6.5 (Medium) , with the primar...

EUVD-2026-74406

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87431

CVE-2026-87431 is a missing authorization flaw in the Extensions component of Google Chrome prior to 153.0.8010.36 . A remote attacker can obtain sensitive information by delivering a crafted Chrome extension to a victim. NVD rates the CVSS 3.1 score at 7.5 (High) with a vector of AV:N/AC:L/PR:N/...

CVE-2026-87493

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87431

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87622

CVE-2026-87622 is a Medium -severity vulnerability (CVSS 4.3) in Google Chrome 's FedCM (Federated Credential Management) component. A missing authorization check allowed a remote attacker to bypass the web origin policy by serving a crafted HTML page that required user interaction. The flaw affe...