CVE-2026-95278

A missing authorization flaw in the WakeLock component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass system access restrictions. To exploit this, the attacker must first compromise the browser's renderer process and then convince a user to open a specially ...

CVE-2026-95300

Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95300

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in DevTools . A remote attacker can leverage social engineering and crafted network traffic to bypass system access restrictions. This issue has been addressed in version 154.0.8037.57 , which is also the...

CVE-2026-95290

Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95290

Google Chrome and the Chromium-based chromium-browser are affected by a vulnerability where a lack of authorization checks in the Near Field Communication (NFC) component allows a remote attacker to bypass system access restrictions. By compromising a renderer process and using a crafted HTML pag...

CVE-2026-95290

Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89119

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89118

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95370

An inappropriate implementation in the NFC component of Google Chrome prior to version 154.0.8037.57 allows a remote attacker to bypass system access restrictions through a crafted HTML page. This vulnerability is categorized with Medium security severity by Chromium. Remediation is available in ...

CVE-2026-95330

Google Chrome versions prior to 154.0.8037.57 are vulnerable to improper state validation in the Downloads component. This flaw allows a remote attacker to bypass system access restrictions by navigating to a crafted HTML page . The impact is rated as Medium by Chromium security standards. Remedi...

CVE-2026-95303

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity flaw involving incomplete cleanup in SmartCard . A remote attacker could utilize social engineering and a crafted HTML page to bypass system access restrictions. This vulnerability is addressed in the 154.0.8037.57 ...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...