CVE-2026-87475

CVE-2026-87475 is a missing authorization flaw in the Omnibox component of Google Chrome prior to 153.0.8010.36 . A remote attacker, leveraging social engineering via a crafted HTML page, can bypass system access restrictions and gain access to a privileged page. The flaw carries a Medium Chromiu...

CVE-2026-87443

Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87443

Google Chrome prior to 153.0.8010.36 is affected by a missing authorization vulnerability in the Actor component. A remote attacker could obtain sensitive information by luring a user into visiting a crafted HTML page. The Chromium project rates this as Medium severity, with a CVSS 3.1 score of 6...

EUVD-2026-74336

Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87443

Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87603

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87603

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87603

CVE-2026-87603 is a missing authorization flaw in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker can exploit it by tricking a user into visiting a crafted HTML page , potentially bypassing system access restrictions . The CVSS 3.1 score is 6.5 (Medium) , with...

EUVD-2026-74329

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87537

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87537

Google Chrome versions prior to 153.0.8010.36 are affected by a missing authorization vulnerability in the Extensions component. A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox via crafted network traffic. The vulnera...

EUVD-2026-74323

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87557

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74319

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87557

CVE-2026-87557 affects Google Chrome prior to 153.0.8010.36 , where a missing authorization in the LocalNetworkAccess component allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Mediu...

CVE-2026-87557

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87606

Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87606

Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74309

Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87606

A missing authorization in Google Chrome's SiteIsolation feature prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially accessing data or functionality that should be restricted. The vulnerabi...