22642 matches found
CVE-2026-91713
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-79989
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91725
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91713
CVE-2026-91713 is a Medium severity (CVSS 4.2) missing authorization flaw in the Browser component of Google Chrome prior to 153.0.8010.47 . A remote attacker who had already compromised the renderer process could exploit the missing authorization to spoof UI elements via a crafted HTML page, pot...
CVE-2026-91725
CVE-2026-91725 is an observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the user's browser. The flaw was reported by Google on 2026-05-29 and carries a Medium Chromium sever...
CVE-2026-91725
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91739
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91714
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91723
CVE-2026-91723 is a race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 that allowed a remote attacker to spoof UI elements via a crafted HTML page. Reported by Luan Herrera in January 2026, it is rated Medium severity by Chromium. The NVD CVSS 3.1 score is 3.1 (Low) with the...
EUVD-2026-79988
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91737
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-79979
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91710
CVE-2026-91710 is a use-after-free vulnerability in the WebAppInstalls component of Google Chrome , reported by Google on 2026-08-26. A remote attacker can execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The fix shipped in the stable channel update to...
CVE-2026-91710
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91710
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91718
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91716
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91716
CVE-2026-91716 is a use-after-free vulnerability in the Auth component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can leverage a crafted HTML page to execute arbitrary code outside the sandbox , resulting in full compromise of confidentiality, integrity, and availability ...