61313 matches found
CVE-2026-87635
UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87641
A race condition in the Browser component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability is rated Medium severity by Chromium and scored 4.2 (CVSS 3.1) by NVD, reflecting high attack ...
CVE-2026-87484
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87484
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74390
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87540
CVE-2026-87540 is an incorrect authorization vulnerability in the Isolated component of Google Chrome , fixed in version 153.0.8010.36 . A remote attacker could deliver a crafted HTML page that causes the browser to spoof UI elements , potentially tricking users into interacting with fraudulent i...
CVE-2026-87451
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87541
Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87451
An information leak in Google Chrome (prior to version 153.0.8010.36 ) allows a remote attacker who has compromised the renderer process to obtain cross-origin data via a crafted HTML page. This vulnerability affects the Downloads component. Impact includes potential information disclosure. Remed...
EUVD-2026-74375
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-74376
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87441
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87495
A vulnerability in the Scroll component of Google Chrome (prior to version 153.0.8010.36 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. This information leak has a Chromium security severity of Medium . Remediation involves u...
CVE-2026-87441
Google Chrome and Chromium-based browsers (including Microsoft Edge ) are vulnerable to a missing authorization flaw in the Downloads component. This vulnerability allows a remote attacker to bypass system access restrictions by utilizing a crafted Chrome extension . The issue affects versions pr...
EUVD-2026-74372
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...