EUVD-2026-74429

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-74427

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87626

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

A use-after-free vulnerability in the Sharing component of Google Chrome on iOS prior to version 153.0.8010.36 allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. The flaw requires user interaction and no prior privileges. The CNA-assigned CVSS 3.1 ...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87626

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87534

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87534

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87482

CVE-2026-87482 is a cleartext transmission vulnerability in the HttpsUpgrades component of Google Chrome on iOS , affecting versions prior to 153.0.8010.36 . A remote attacker can leak sensitive information via crafted network traffic, rated CVSS 5.9 (Medium) by Chromium. The fix is to update Goo...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87590

CVE-2026-87590 is an improper input validation vulnerability in the Passwords component of Google Chrome (also affecting chromium-browser packages on Linux distributions). Versions prior to 153.0.8010.36 allow a remote attacker to potentially leak sensitive information by sending crafted network ...

EUVD-2026-74338

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87613

Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87613

Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-74323

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87578

CVE-2026-87578 is a use-after-free vulnerability in the Receiver component of Google Chrome prior to version 153.0.8010.36 . An adjacent network attacker can exploit it via crafted network traffic to achieve arbitrary code execution outside the Chrome sandbox , with a CVSS 3.1 score of 8.3 (HIGH)...

CVE-2026-87578

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...