34982 matches found
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87480
A flaw was found in chromium-browser. This use-after-free vulnerability in the Printing component allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially...
DEBIAN-CVE-2026-87477
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87470
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87459
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87456
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87444
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-87429
Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87435
Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87589
A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...
CVE-2026-87531
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS by using a specially crafted HTML page. This vulnerability allows the attacker to obtain sensitive data from other origins,...
CVE-2026-87461
A flaw was found in Chromium, specifically in its Core component. A remote attacker could exploit this vulnerability by using a specially crafted Chrome extension. This could lead to the unauthorized disclosure of sensitive cross-origin data...
CVE-2026-87483
A flaw was found in Chromium. Incorrect authorization in the browser on Android allows a remote attacker to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page...
CVE-2026-87583
A flaw was found in Chromium, specifically within the Passwords user interface UI in Google Chrome on Android. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof UI elements, potentially misleading users...
CVE-2026-87476
An incorrect authorization flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506390077...
CVE-2026-87465
An incorrect authorization flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496616790...
CVE-2026-87458
A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability in the Geometry component allows a remote attacker to spoof UI elements. By leveraging social engineering techniques and a specially crafted HTML page, an attacker can deceive users, potentially leading t...
CVE-2026-87633
A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. The exploitation occurs through user interface UI interaction, leading to a compromise of the system beyond the intended security boundarie...