CVE-2026-87590

An improper input validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502814490...

CVE-2026-87563

An origin validation error flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532952073...

CVE-2026-87435

A flaw was found in Google Chrome's ControlledFrame. A remote attacker, who has compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...

CVE-2026-87639

A flaw was found in WebPackaging in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87625

A flaw was found in Chromium V8. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code within the sandbox environment. The exploitation occurs when a user is tricked into installing a specially crafted Chrome extension...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87547

An incorrect reference resolution flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497111188...

CVE-2026-87579

A flaw was found in WebRTC within Google Chrome. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-87536

A flaw was found in Google Chrome's V8 engine. This use-after-free vulnerability allows a remote attacker to execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker can exploit this flaw. This could lead to the execution of malicious code within the...

CVE-2026-87533

An use after free flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521620916...

CVE-2026-87530

A flaw was found in the CredentialProvider component of Google Chrome on Windows. This vulnerability, an uncontrolled search path element, allows a local attacker to execute arbitrary code. By exploiting this flaw via a local program, an attacker can bypass the browser's sandbox and run malicious...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87561

A flaw was found in chromium-browser. A remote attacker could exploit incorrect authorization in Web Authentication by using a specially crafted Chrome extension. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access or information disclosure...

CVE-2026-87658

A flaw was found in Google Chrome's Extensions component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques and a specially crafted Chrome extension. This could lead to an information leak, allowing the attacker to obtain sensitive data from other...

CVE-2026-87610

An incorrect authorization flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547592631...

CVE-2026-87511

A missing authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513395384...

CVE-2026-87570

A flaw was found in SiteIsolation in Google Chrome. A remote attacker, who has already compromised the renderer process, could leverage social engineering and a crafted file to bypass the browser's site isolation feature. This bypass could allow the attacker to access information or resources fro...