WebMCP Component Compromise Protected Information

The vulnerability in the WebMCP component of Google Chrome and Microsoft Edge stems from a flaw in its data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

WebMCP Component Access Protected Information

The vulnerability in the WebMCP component of Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

In WebMCP in Google Chrome prior to version 150.0.7871.186, use of “after free” allowed a remote attacker to execute arbitrary code within a sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The information leak in WebMCP in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

WebMCP Component Code Execution

The vulnerability in the WebMCP component of Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Chromium CVE-2026-87521: Information leak in WebMCP

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

A flaw was found in WebMCP in Chromium. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive cross-origin data...

DEBIAN-CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74351

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87521

An information leak in WebMCP within Google Chrome prior to version 153.0.8010.36 allows a remote attacker who has compromised the renderer process to obtain cross-origin data via a crafted HTML page. This vulnerability has a Chromium security severity of Medium . Microsoft Edge is also affected ...

CVE-2026-87521: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin dat...

PT-2026-88621

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in WebMCP. A remote attacker who has compromised the renderer process can obtain cross-origin data by using a crafted HTML page. Recommendations Update Google...