CVE-2026-87429

A flaw was found in the ServiceWorker component of Chromium. A remote attacker, after compromising the renderer process, could exploit a missing authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass system access restrictions...

CVE-2026-87503

A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87515

A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

EUVD-2026-74441

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

EUVD-2026-74425

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87483

CVE-2026-87483 is an incorrect authorization vulnerability in Google Chrome on Android , affecting versions prior to 153.0.8010.36 . The flaw resides in the Browser component and allows a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The Chromium project ...

CVE-2026-87548

CVE-2026-87548 is an improper state validation flaw in the Installer component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass system access restrictions . Chromium rated the security severity as Medium . The fix is available in Chrom...

CVE-2026-87534

Missing authorization in the WebView component of Google Chrome on Android versions prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to bypass system access restrictions via crafted network traffic. The Chromium security severity is rated Medium . The fix is to upd...

EUVD-2026-74354

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87513

CVE-2026-87513 is a missing authorization vulnerability in the ControlledFrame component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can deliver a crafted HTML page that bypasses system access restrictions. The Chromium project as...

CVE-2026-87560

CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by delivering a crafted HTML page , enabling the bypass of system access restrictions . The Chromium project rated the severity as Me...

CVE-2026-87645

CVE-2026-87645 is an improper state validation vulnerability in the Safebrowsing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions . Chromium assigns this a Medium security severity. The fix is inc...

CVE-2026-87603

CVE-2026-87603 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to bypass system access restrictions. The Chromium security team rates the severity as Medium . The fix ...

EUVD-2026-74321

Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88593

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88648

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88745

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...