CVE-2026-11001

Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Payments component. This vulnerability could allow remote attackers to execute UI spoofing through...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. There is a security vulnerability in Google Chrome, which stems from improper implementation of the Payments component...

CVE-2026-8566

An insufficient policy enforcement flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=470646792...

CVE-2026-8520

A race flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503619813...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a security vulnerability, which was caused by insufficient policy enforcement in the Payments component. This vulnerability could allow remote attackers to bypass autonomous access...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a race condition vulnerability, which originated from a race condition issue in the Payments component. This vulnerability could allow remote attackers to exploit the system by usin...

CVE-2026-7993

An insufficient validation of untrusted input flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499099003...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.96 had a vulnerability related to input validation. This vulnerability stemmed from insufficient trust-based input validation in the Payments component, which could allow a remote attacker with...

CVE-2026-6319

An use after free flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499018889...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google. A memory misreference vulnerability exists in Google Chrome. The vulnerability stems from a failure of the Payments component for Android to properly handle memory objects, which can be exploited by an attacker to execute arbitrary code by...

The vulnerability of the Payments component in Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and perform a substitution of the user interface.

The vulnerability of the Payments component in Google Chrome and Microsoft Edge involves exploiting authentication bypass techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML pa...

PT-2025-1283 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Payments component of Google Chrome and Microsoft Edge, allowing a remote...

The vulnerability of the Payments component in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user interface.

The vulnerability of the Payments component in Microsoft Edge and Google Chrome is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

PT-2024-6995 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.58 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Payments component of Google Chrome and Microsoft Edge, which can lead to...

The vulnerability of the Payments component in Microsoft Edge and Google Chrome browsers allows attackers to bypass security restrictions.

The vulnerability of the Payments component in Microsoft Edge and Google Chrome is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

PT-2024-1389 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Description: The issue is related to incorrect security UI in Payments, allowing a remote attacker to potentially spoof security UI via a crafted HTML page. This could enable the attacker to bypas...

The vulnerability of Google Chrome’s Payments component allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Payments component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-34707)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from the discovery of a free use after use security issue in the "Payments" component of the program. No...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from the discovery of a free use after use security issue in the "Payments" component of the program. No...