EUVD-2026-74343

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87576

An uninitialized resource in the GPU component of Google Chrome on Android prior to version 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to read memory outside the sandbox via a crafted HTML page. The vulnerability was rated Medium severity by the Chrom...

CVE-2026-87613

CVE-2026-87613 is an incorrect reference resolution vulnerability in the Extensions component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this flaw via crafted network traffic to potentially execute arbitrary code outside the browser sandbox . The Chromium te...

CVE-2026-87582

A confused deputy flaw in the DataTransfer component of Google Chrome prior to version 153.0.8010.36 could allow a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the security severity as...

EUVD-2026-74327

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87537

Missing authorization in the Extensions component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. The Chromium security severity is rated Mediu...

EUVD-2026-74322

Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87481

CVE-2026-87481 is an incorrect authorization vulnerability in WebView within Google Chrome on Android prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page....

EUVD-2026-74320

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

EUVD-2026-74317

Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87457

CVE-2026-87457 is a race condition in the Updater component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A local attacker can leverage this flaw to execute arbitrary code outside the sandbox via a local program. Chromium rates the severity as Medium . The fix is to up...

CVE-2026-87506

CVE-2026-87506 is a privilege elevation flaw in the WebUI component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could, via a crafted HTML page, execute arbitrary code outside the sandbox . Chromium rates the security severity as Med...

CVE-2026-87553

Google Chrome prior to 153.0.8010.36 contains an improper input validation flaw in the SiteIsolation mechanism. A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security ...

CVE-2026-87547

CVE-2026-87547 is an incorrect reference resolution flaw in the FileSystem component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerabili...

EUVD-2026-74315

Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74311

Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74534

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87504

A use after free vulnerability in Core of Google Chrome prior to 153.0.8010.36 allows a remote attacker, leveraging social engineering via a crafted Chrome extension, to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Medium . Users should update to version 153....

EUVD-2026-74528

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87480

CVE-2026-87480 is a use-after-free vulnerability in the Printing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox . The Chromium...