Actor component Data Compromise

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84331

Google Chrome versions prior to 152.0.7977.75 are vulnerable to an incorrect authorization issue in Actor . A remote attacker who has already compromised the renderer process can exploit this to bypass web origin policy using a crafted HTML page. This vulnerability also affects Microsoft Edge (Ch...

Actor Component DoS

The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Actor Component DoS

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a flaw in the Actor component involving improper privilege management . A remote attacker can bypass system access restrictions by leveraging social engineering techniques through a specially crafted HTML page . For Debian 12 bookwor...

CVE-2026-17700

An insufficient validation of untrusted input flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517789833...

CVE-2026-13930

An insufficient policy enforcement flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512937764...

CVE-2026-15116

An use after free flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522092013...

CVE-2026-15116

A use after free vulnerability in the Actor component of Google Chrome (and Microsoft Edge ) allows a remote attacker to execute arbitrary code inside a sandbox. This is triggered by navigating to a crafted HTML page . The issue affects versions prior to 150.0.7871.115 . Remediation includes upgr...

Actor component bypass security restrictions

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

CVE-2026-11018

An insufficient policy enforcement flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497342466...

CVE-2026-10954

An use after free flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506150628...

Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-10954

Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from insufficient policy execution in the Actor component, which could allow remote attackers to bypass navigation restrictions...