CVE-2026-93386

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-93386

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-82490

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-82489

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93386

CVE-2026-93386 is a UI misrepresentation vulnerability in Google Chrome 's WebAppInstalls component, affecting versions prior to 153.0.8010.52 . A remote attacker leveraging social engineering could spoof UI elements via a crafted HTML page, rated Low by Chromium and CVSS 5.4 (Medium) by NVD. The...

CVE-2026-93386

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93383

CVE-2026-93383 is a Medium -severity information leak in the Permissions component of Google Chrome prior to version 153.0.8010.52 . A remote attacker could exploit a crafted HTML page to leak cross-origin data . The bug was reported by Google on 2026-05-22 and fixed in the stable channel update ...

EUVD-2026-82486

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93377

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93387

CVE-2026-93387 is an improper state validation vulnerability in Skia , a graphics library used by Google Chrome . A remote attacker can obtain cross-origin data by serving a crafted HTML page. The bug was reported by Google on 2026-08-26 and rated High by Chromium security. The CNA-assigned CVSS ...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93379

CVE-2026-93379 is an incorrect authorization flaw in the ORB (Origin/Request Binding) component of Google Chrome prior to 153.0.8010.52 . A remote attacker can craft an HTML page to bypass site isolation , rated High by Chromium and 4.3 Medium by CVSS v3.1. The bug was reported by OGINOME Tomohit...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-93382

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-93382

CVE-2026-93382 is a use-after-free vulnerability in the PDFium PDF rendering engine within Google Chrome , affecting versions prior to 153.0.8010.52 . A remote attacker can execute arbitrary code inside the sandbox by serving a crafted HTML page to the user, requiring user interaction but no prio...