CVE-2026-87511

CVE-2026-87511 is a missing authorization flaw in DevTools within Google Chrome prior to 153.0.8010.36 . A remote attacker could leverage a crafted Chrome extension to obtain cross-origin data . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.36 . No...

EUVD-2026-74444

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87619

CVE-2026-87619 affects Google Chrome prior to 153.0.8010.36 , where an observable discrepancy in the Prefetch mechanism allowed a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is rated Low severity by Chromium. Remediation is to update to Chrome 153.0.8010.3...

EUVD-2026-74436

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87531

CVE-2026-87531 is an information leak vulnerability in the CORS implementation of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page, bypassing CORS isolation. The Chrom...

EUVD-2026-74413

Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87563

CVE-2026-87563 is an origin validation error in Paint within Google Chrome , affecting versions prior to 153.0.8010.36 . The flaw allowed a remote attacker to obtain cross-origin data by serving a crafted HTML page to a victim. The Chromium security team rated this as Medium severity. The fix is ...

EUVD-2026-74410

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87451

CVE-2026-87451 is an information leak in the Downloads component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data by delivering a crafted HTML page. Chromium assigned this vulnerability a Medium sev...

EUVD-2026-74381

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87574

CVE-2026-87574 is an information leak in the ServiceWorker component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain cross-origin data by convincing a user to open a crafted HTML page . Chromium rated the severity as Medium . The fix is included in Ch...

CVE-2026-87495

CVE-2026-87495 is an information leak in the Scroll component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , breaking the same-origin policy isolation within the com...

EUVD-2026-74379

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74378

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

CVE-2026-87452 is an incorrect authorization vulnerability in the GPU component of Google Chrome on Mac (versions prior to 153.0.8010.36 ). A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data via a crafted HTML page. The Chromium security ...

CVE-2026-87516

An observable discrepancy in the Navigation component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The flaw was classified as Medium severity by Chromium. The fix is included in the stable channel update shipped on 20...

EUVD-2026-74363

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74362

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74352

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74351

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...