Lucene search
+L

2744 matches found

OSV
OSV
added 2026/09/09 1:17 a.m.7 views

DEBIAN-CVE-2026-87589

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00202EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/09 1:17 a.m.6 views

DEBIAN-CVE-2026-87582

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.3CVSS6.7AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.6 views

CVE-2026-87582

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.3CVSS0.00357EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:17 a.m.5 views

CVE-2026-87485

A flaw was found in Google Chrome. This incorrect authorization vulnerability in Cross-Origin Resource Sharing CORS allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass is achieved by crafting a malicious HTML page, potentially...

3.1CVSS5.8AI score0.00222EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.7 views

DEBIAN-CVE-2026-87580

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.7AI score0.00213EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/09 1:17 a.m.7 views

DEBIAN-CVE-2026-87576

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

3.4CVSS5.8AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.5 views

CVE-2026-87580

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00213EPSS
SaveExploits1References2
NVD
NVD
added 2026/09/09 1:17 a.m.6 views

CVE-2026-87576

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

3.4CVSS0.00195EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 1:17 a.m.8 views

CVE-2026-87572

Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00308EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 1:17 a.m.9 views

CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

8.8CVSS0.00226EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.8 views

DEBIAN-CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

8.8CVSS5.7AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.6 views

CVE-2026-87568

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...

4.8CVSS0.00156EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.6 views

DEBIAN-CVE-2026-87568

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...

4.3CVSS5.8AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.6 views

CVE-2026-87557

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00221EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 1:17 a.m.7 views

CVE-2026-87537

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

8.1CVSS0.00302EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.6 views

DEBIAN-CVE-2026-87537

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

8.1CVSS6.6AI score0.00302EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/09 1:17 a.m.8 views

DEBIAN-CVE-2026-87538

Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

4.2CVSS5.8AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.5 views

CVE-2026-87538

Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

4.2CVSS0.00203EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 1:17 a.m.6 views

CVE-2026-87543

Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00189EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.8 views

DEBIAN-CVE-2026-87543

Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.7AI score0.00189EPSS
SaveExploits0References1
Rows per page
Query Builder