6140 matches found
CVE-2026-87534
A flaw was found in WebView in Google Chrome. This missing authorization vulnerability allows a remote attacker, by leveraging social engineering techniques, to bypass system access restrictions. This can be achieved through specially crafted network traffic...
CVE-2026-87493
A flaw was found in chromium-browser. Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...
CVE-2026-87649
A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...
CVE-2026-87595
A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...
CVE-2026-87589
A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...
CVE-2026-87483
A flaw was found in Chromium. Incorrect authorization in the browser on Android allows a remote attacker to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page...
CVE-2026-87544
CVE-2026-87544 affects the Extensions component of Google Chrome prior to version 153.0.8010.36 . The root cause is an incorrect authorization flaw that allows a remote attacker to bypass system access restrictions into a privileged page by delivering a crafted HTML page. Chromium rates the secur...
CVE-2026-87473
CVE-2026-87473 is an incorrect authorization flaw in the FileHandling component of Google Chrome prior to 153.0.8010.36 . A remote attacker, leveraging social engineering, can bypass system access restrictions by serving a crafted HTML page. The Chromium team rates the severity as Low . Users sho...
CVE-2026-87595
CVE-2026-87595 is a server-side request forgery (SSRF) vulnerability in Google Chrome (Mobile), affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated L...
EUVD-2026-74446
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74445
Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. Chromium security severity: Low...
CVE-2026-87429
CVE-2026-87429 is a missing authorization vulnerability in the ServiceWorker component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to bypass system access restrictions . The Ch...
EUVD-2026-74407
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87493
CVE-2026-87493 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by delivering a crafted HTML page to the victim. Chromium rates this as Medium severi...
CVE-2026-87535
Information loss or omission in the Safebrowsing component of Google Chrome on Mac (versions prior to 153.0.8010.36 ) allowed a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The flaw falls under the CWE category of information loss or omission, meaning se...
CVE-2026-87641
CVE-2026-87641 is a race condition in the Browser component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this by serving a crafted HTML page , enabling bypass of system access restrictions . The Chromium security team rates this as Medium severity. ...
EUVD-2026-74401
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74398
Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87532
This vulnerability affects the Safebrowsing component in Google Chrome versions prior to 153.0.8010.36 . An improper state validation flaw allows a remote attacker to bypass system access restrictions by serving a crafted HTML page to a victim. Chromium rates the security severity as Medium . The...