EUVD-2026-74389

Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74381

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

An information leak in Google Chrome (prior to version 153.0.8010.36 ) allows a remote attacker who has compromised the renderer process to obtain cross-origin data via a crafted HTML page. This vulnerability affects the Downloads component. Impact includes potential information disclosure. Remed...

EUVD-2026-74378

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74379

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

A vulnerability in the Scroll component of Google Chrome (prior to version 153.0.8010.36 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. This information leak has a Chromium security severity of Medium . Remediation involves u...

CVE-2026-87495

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87495

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

A vulnerability in the ServiceWorker component of Google Chrome (prior to version 153.0.8010.36) allows a remote attacker to obtain cross-origin data via a crafted HTML page. This information leak is categorized as having a Medium security severity by Chromium. The vulnerability affects Microsoft...

CVE-2026-87574

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

Google Chrome, prior to version 153.0.8010.36 , is vulnerable to an observable discrepancy in navigation (CWE-203). A remote attacker can exploit this via a crafted HTML page to leak cross-origin data . This issue affects Chromium-based browsers , including Microsoft Edge and Astra Linux (Chromiu...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

Google Chrome on Mac versions prior to 153.0.8010.36 contains a vulnerability (CVE-2026-87452 ) where incorrect authorization in GPU allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. This issue has been addressed in ...