EUVD-2026-74466

Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87461

An information leak in the Core component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension . Chromium rated the severity as Low , with a CVSS 3.1 base score of 4.3 (Medium) requiring user interaction but no privileges. CISA...

CVE-2026-87461

Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87489

Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-74444

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87511

A missing authorization flaw in the DevTools component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive cross-origin data via a crafted Chrome extension. Chromium rated the severity as Low , with a CVSS 3.1 score of 4.3 (Medium) . The vulnerability requires us...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87561

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87561

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-74437

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87561

CVE-2026-87561 affects Google Chrome prior to 153.0.8010.36 , where an incorrect authorization in the Web Authentication component allowed a remote attacker to bypass the web origin policy via a crafted Chrome extension. Chromium rated the issue Low severity; NVD assigned a CVSS 3.1 base score of...

CVE-2026-87591

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87591

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-74425

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87591

Incorrect authorization in the Extensions component of Google Chrome prior to 153.0.8010.36 allows a remote attacker to bypass system access restrictions via a crafted Chrome extension. The attack requires user interaction but no prior privileges, with a High impact on integrity and no impact on ...

CVE-2026-87625

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87625

CVE-2026-87625 is a use-after-free vulnerability in V8 , the JavaScript engine used by Google Chrome, affecting versions prior to 153.0.8010.36 . A remote attacker can exploit it via a crafted Chrome extension delivered through social engineering to execute arbitrary code inside the Chrome sandbo...

EUVD-2026-74408

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87625

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...