CVE-2026-87506

A flaw was found in Google Chrome's WebUI. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to privilege elevation, allowing the attacker to execute arbitrary code outside o...

CVE-2026-87553

A flaw was found in SiteIsolation in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when the attacker provides a specially crafted HTML page, leadi...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87543

A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...

CVE-2026-87618

A flaw was found in Google Chrome. This vulnerability involves incorrect reference resolution within the browser's Storage component. A remote attacker, who has already compromised the browser's renderer process, could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2026-87502

A flaw was found in Google Chrome. This confused deputy vulnerability in the Fullscreen feature allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to spoof user interface UI elements. This can be achieved by presenting a specially crafted HTML pag...

CVE-2026-87572

A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...

CVE-2026-87580

A flaw was found in Google Chrome. An incorrect authorization vulnerability in WebAppInstalls could allow a remote attacker to bypass site isolation. This exploitation requires the attacker to first compromise the renderer process and then leverage social engineering through a crafted HTML page...

CVE-2026-87568

A flaw was found in Chromium. This improper input validation vulnerability allows a remote attacker, who has compromised the renderer process, to spoof user interface UI elements. This can be achieved by sending crafted network traffic, potentially deceiving users or leading to further attacks...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87576

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could allow the attacker to read memory outside of the sandbox,...

CVE-2026-87640

A flaw was found in WebView in Google Chrome on Android. A remote attacker who has compromised the renderer process could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to the disclosure of memory outside of the sandbox, potentially exposing sensiti...

CVE-2026-87495

A flaw was found in chromium-browser. A remote attacker, who has compromised the renderer process, could exploit a vulnerability in the Scroll component by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87435

A flaw was found in Google Chrome's ControlledFrame. A remote attacker, who has compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87510

A flaw was found in chromium-browser's FileAPI component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87541

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak in the Navigation component, allowing the attacker to bypass site isolation...