CVE-2026-87472

CVE-2026-87472 is an improper input validation flaw in FedCM (Federated Credential Management) within Google Chrome prior to version 153.0.8010.36 . The vulnerability requires a compromised renderer process as a precondition, after which a remote attacker can spoof UI elements via a crafted HTML ...

CVE-2026-87462

A UI misrepresentation vulnerability in the FedCM (Federated Credentials Management) component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering , to spoof UI elements via a crafted HTML page. The Chromium project assigned this a Medium secur...

EUVD-2026-74364

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74361

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87599

Google Chrome prior to 153.0.8010.36 contains an improper input validation flaw in its Interstitials component. A remote attacker can exploit this by serving a crafted HTML page that allows spoofing of UI elements , potentially tricking users into interacting with malicious interface elements. Th...

EUVD-2026-74365

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87562

CVE-2026-87562 affects Google Chrome on Mac prior to version 153.0.8010.36 . The vulnerability is an incorrect reference resolution in the Accessibility component, which could allow a remote attacker to spoof UI elements via a crafted HTML page. Chromium rates the severity as Medium . Remediation...

EUVD-2026-74355

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87432

CVE-2026-87432 is an incorrect authorization vulnerability in the Navigation component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit it to spoof UI elements via a crafted HTML page. Chromium rates the security se...

EUVD-2026-74349

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87615

CVE-2026-87615 is a race condition in the Payments component of Google Chrome prior to version 153.0.8010.36 . A remote attacker leveraging social engineering can exploit this flaw via a crafted HTML page to spoof UI elements , classified by Chromium as Medium severity. The fix is available in Ch...

EUVD-2026-74330

Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87465

An incorrect authorization flaw in the Downloads feature of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium rates the severity as Medium , reflecting the requirement that the ren...

EUVD-2026-74313

Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88565

Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88562

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88659

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88724

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

PT-2026-88715

Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88532

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...