CVE-2026-84325

A flaw was found in chromium-browser. This improper input validation vulnerability in the DataTransfer component allows a remote attacker, through social engineering, to bypass system access restrictions by leveraging a co-installed application. This could lead to unauthorized access to sensitive...

CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153...

CVE-2026-87582

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.3...

CVE-2026-87523

A flaw was found in Chromium. A race condition in the DataTransfer component allows a remote attacker, by leveraging social engineering techniques, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87594

A flaw was found in Google Chrome's DataTransfer component. An issue with incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation can occur by enticing a user to visit a specially crafted HTML page...

DEBIAN-CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87582

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87582

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87523

A race condition in the DataTransfer component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to obtain sensitive information . The CVSS 3.1 score is 6.5 (MEDIUM) with high confidentiality impact , while Chromium rates the...

EUVD-2026-74457

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87523

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

CVE-2026-87594 is an incorrect authorization flaw in the DataTransfer component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by delivering a crafted HTML page. The vulnerability is rated Medium seve...