CVE-2026-87495

A flaw was found in chromium-browser. A remote attacker, who has compromised the renderer process, could exploit a vulnerability in the Scroll component by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87606

A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...

CVE-2026-87435

A flaw was found in Google Chrome's ControlledFrame. A remote attacker, who has compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...

CVE-2026-87639

A flaw was found in WebPackaging in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87510

A flaw was found in chromium-browser's FileAPI component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87541

An information leak flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517156678...

CVE-2026-87570

A flaw was found in SiteIsolation in Google Chrome. A remote attacker, who has already compromised the renderer process, could leverage social engineering and a crafted file to bypass the browser's site isolation feature. This bypass could allow the attacker to access information or resources fro...

CVE-2026-87487

A flaw was found in the FileSystem component of Chromium. This missing authorization vulnerability could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside of the sandbox. This exploitation is...

CVE-2026-87481

A flaw was found in WebView in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the security sandbox. This can be achieved by enticing a user to visit a specially...

CVE-2026-87611

A flaw was found in Google Chrome. Missing authorization in the FileSystem component allows a remote attacker, who has already compromised the renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87594

A flaw was found in Google Chrome's DataTransfer component. An issue with incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87652

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87647

Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...