1439 matches found
CVE-2026-102330
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-102329
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
EUVD-2026-89253
Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89134
Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89248
Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89255
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89161
Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-89153
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-89133
Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89147
Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95366
Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95361
Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95342
Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95342
A missing authorization vulnerability in the V8 engine of Google Chrome (prior to version 154.0.8037.57) allows a remote attacker to bypass the web origin policy through a crafted HTML page. This issue has been addressed in recent security updates, such as the stable channel update for desktop an...
CVE-2026-95285
Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to a missing authorization flaw in the WebView component. A remote attacker who has compromised the renderer process can bypass the web origin policy by serving a crafted HTML page. This vulnerability is categorized with a Low ...
CVE-2026-95275
Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect reference resolution in MediaStream . This flaw allows a remote attacker to bypass the web origin policy and access a privileged page via a crafted HTML page. This vulnerability has been addressed in version 154.0.8037.5...
CVE-2026-95297
Google Chrome versions prior to 154.0.8037.57 are vulnerable to missing authorization in Contextual Tasks. This flaw allows a remote attacker to bypass the web origin policy by navigating to a crafted HTML page. The vulnerability is rated with a Medium security severity. Remediation is available ...
CVE-2026-95375
A vulnerability in Google Chrome prior to version 154.0.8037.57 was identified due to incorrect authorization in BrowserTag . This flaw allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The vulnerability is assigned a Medi...
CVE-2026-95366
Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Use of released resource in the Core component. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is r...