1232178 matches found
CVE-2026-87511
A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...
CVE-2026-87611
A flaw was found in Google Chrome. Missing authorization in the FileSystem component allows a remote attacker, who has already compromised the renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-87651
A flaw was found in Google Chrome's Paint component. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to information from other web origins...
CVE-2026-87508
A flaw was found in the Loader component of Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions acro...
CVE-2026-87539
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosure...
CVE-2026-87658
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
DEBIAN-CVE-2026-87658
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87632
Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87611
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87611
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87485
A flaw was found in Google Chrome. This incorrect authorization vulnerability in Cross-Origin Resource Sharing CORS allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass is achieved by crafting a malicious HTML page, potentially...
CVE-2026-87574
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87574
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...