CVE-2026-113007

A flaw was found in chromium-browser. A memory corruption vulnerability in the Permissions component allows a remote attacker to execute arbitrary code outside the sandbox, which is an isolated security boundary designed to restrict untrusted programs. By convincing a user to open a specially...

CVE-2026-113168

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser's sandbox environment by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free memory issue in the Permissions component...

CVE-2026-113256

A flaw was found in chromium-browser. A use-after-free vulnerability in the Permissions component allows a remote attacker to execute arbitrary code within the browser's sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in the Permissions component, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in the Permissions component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

CVE-2026-93383

A flaw was found in Google Chrome. This vulnerability, an information leak in the Permissions component, allows a remote attacker to leak cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to unauthorized disclosure of sensitive information...

PT-2026-95125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description An information leak exists in the Permissions component that allows a remote attacker to leak cross-origin data by using a crafted HTML page. Cross-origin data leakage occurs when a...

Chromium CVE-2026-87450: Incorrect authorization in Permissions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260915-73-0136

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0091

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0084

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML...

ROS-20260915-73-0085

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0106

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to a lack of data protection mechanisms. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to affect data integrity through a specially created HTML page...

Google Chrome Permissions Confidential Data Access

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to affect data integrity through a specially created HTML page...

CVE-2026-79046

A race condition flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501437087...

DEBIAN-CVE-2026-79046

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...