CVE-2026-87468

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87468

CVE-2026-87468 is an incorrect authorization flaw in the Isolated component of Google Chrome (Chromium) prior to 153.0.8010.36 . A remote attacker can bypass site isolation by delivering a crafted HTML page to a user. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:N...

CVE-2026-87589

CVE-2026-87589 is an incorrect authorization flaw in SiteIsolation in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass system access restrictions . The Chromium security team rates the severity a...

CVE-2026-87505

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

EUVD-2026-74388

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-87505

CVE-2026-87505 is an incorrect authorization flaw in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process can bypass site isolation using a crafted PDF file , leading to high confidentiality and integrity impact (CVS...

CVE-2026-87505

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

EUVD-2026-74382

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

CVE-2026-87541

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87570

CVE-2026-87570 is an incorrect authorization flaw in SiteIsolation in Google Chrome prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation by delivering a crafted file. The NVD assigns a CVSS 3.1 base ...

EUVD-2026-74380

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

CVE-2026-87541

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

CVE-2026-87541

CVE-2026-87541 is an information leak in the Navigation component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , escalating from a partial renderer compromise to broader acc...

EUVD-2026-74339

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87580

Incorrect authorization in the WebAppInstalls component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, leveraging social engineering. The vulnerability carries a CVSS 3.1 score of...

CVE-2026-87580

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87580

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87471

CVE-2026-87471 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 153.0.8010.36 . An attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , potentially escalating access to data protected by ...