DEBIAN-CVE-2026-87447

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: High...

DEBIAN-CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87458

A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability in the Geometry component allows a remote attacker to spoof UI elements. By leveraging social engineering techniques and a specially crafted HTML page, an attacker can deceive users, potentially leading t...

CVE-2026-87608

CVE-2026-87608 is an improper certificate validation flaw in FedCM (Federated Credentials) in Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can use crafted network traffic to bypass web origin policy , rated Low severity by Chromium. The fix is included in...

EUVD-2026-74474

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

EUVD-2026-74473

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87571

CVE-2026-87571 is an improper certificate validation vulnerability in the Loader component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could use crafted network traffic to bypass the web origin policy , resulting in low confidenti...

CVE-2026-87551

CVE-2026-87551 addresses an improper certificate validation flaw in the CORS (Cross-Origin Resource Sharing) mechanism of Google Chrome prior to version 153.0.8010.36 . A remote attacker leveraging social engineering could craft network traffic to bypass the web origin policy , leading to a limit...

EUVD-2026-74471

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87551

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87473

CVE-2026-87473 is an incorrect authorization flaw in the FileHandling component of Google Chrome prior to 153.0.8010.36 . A remote attacker, leveraging social engineering, can bypass system access restrictions by serving a crafted HTML page. The Chromium team rates the severity as Low . Users sho...

CVE-2026-87575

An incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to bypass system access restrictions. The flaw is rated Low severity by Chromium and scores 5.4 (Mediu...

EUVD-2026-74465

Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74470

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87575

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

CVE-2026-87605 is a missing authorization vulnerability in the Contacts component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and serving a crafted HTML page, potentially obtain sensit...