CVE-2026-87558

A use-after-free vulnerability in the Payments component of Google Chrome for Mac (prior to 153.0.8010.36 ) allows a remote attacker to execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. Chromium rates the severity as High . The fix is included in Chrom...

EUVD-2026-74522

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74521

Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74513

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87639

CVE-2026-87639 is a use after free vulnerability in the WebPackaging component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to potentially execute arbitrary code outside the san...

CVE-2026-87572

CVE-2026-87572 is an injection vulnerability in Google Chrome's DevTools component, affecting versions prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process can leverage this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandb...

EUVD-2026-74509

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74510

Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74507

Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87646

A use-after-free vulnerability in the Web Authentication component of Google Chrome prior to version 153.0.8010.36 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The Chromium security severity is rated High . The fix is in...

CVE-2026-87500

CVE-2026-87500 is an improper validation of array index vulnerability in the ANGLE component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can potentially execute arbitrary code outside the sandbox by convincing a user to load a crafted HTML page. The Chromium s...

CVE-2026-87514

CVE-2026-87514 is a use-after-free vulnerability in the Views component of Google Chrome , affecting versions prior to 153.0.8010.36 . A local attacker can exploit this flaw via a local program to execute arbitrary code outside the browser sandbox , representing a significant escalation of privil...

EUVD-2026-74502

Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74505

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74504

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74501

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-87604

CVE-2026-87604 is an out-of-bounds read in the ANGLE graphics component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page....

CVE-2026-87524

CVE-2026-87524 is a use-after-free vulnerability in the Core component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page....

CVE-2026-87554

A race condition in Chromoting , the remote desktop component of Google Chrome on Windows , allowed a local attacker to execute arbitrary code outside the sandbox via a local program. The vulnerability affects Chrome versions prior to 153.0.8010.36 and was assigned a High severity by the Chromium...

EUVD-2026-74499

Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...