29404 matches found
EUVD-2026-79993
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91719
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-91719
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-91719
CVE-2026-91719 is a code injection flaw in the XML component of Google Chrome (Chromium). A remote attacker could leverage a crafted HTML page to bypass the web origin policy . Affected versions are Google Chrome prior to 153.0.8010.47 . Chromium rates this Low severity, while NVD assigns a CVSS ...
CVE-2026-91730
A vulnerability in Google Chrome (prior to version 153.0.8010.47) stems from incomplete cleanup in GetUserMedia . A remote attacker who has already compromised the renderer process can leverage social engineering via a crafted HTML page to obtain cross-origin data . This issue is also present in ...
CVE-2026-91719
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-91730
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-79986
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91732
CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to 153.0.8010.47 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass the web origin policy. Chromiu...
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91746
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
EUVD-2026-79979
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91746
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91746
An integer overflow in the Compositing component of Google Chrome (prior to version 153.0.8010.47) allows a remote attacker to obtain cross-origin data via a crafted HTML page. This vulnerability impacts various distributions, including openSUSE , Fedora , and Debian . Remediation includes updati...
CVE-2026-91740
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91740
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91708
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...