CVE-2026-87593

Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87593

An information leak in the Editing component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security severity is rated Low , while the CVSS v3.1 score is 6.5 (Medium) with a network vector requiring u...

EUVD-2026-74480

Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74478

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74477

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74476

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74474

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87437

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87437

CVE-2026-87437 is an information leak in the Frames component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to leak sensitive information. Chromium rates the severity as Low , while the assigned CVSS 3.1 score is 6.5 (MEDIUM) with high ...

CVE-2026-87608

CVE-2026-87608 is an improper certificate validation flaw in FedCM (Federated Credentials) in Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can use crafted network traffic to bypass web origin policy , rated Low severity by Chromium. The fix is included in...

CVE-2026-87477

CVE-2026-87477 is an information disclosure vulnerability in Google Chrome's Core component, affecting versions prior to 153.0.8010.36 . A remote attacker can exploit a crafted HTML page (with user interaction) to leak sensitive information. The Chromium project rates the severity as Low , while ...

EUVD-2026-74475

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87477

Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74473

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87437

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87601

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87601

A race condition in the V8 JavaScript engine in Google Chrome prior to 153.0.8010.36 allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. Chromium rates the severity as Low , while the CNA CVSS v3.1 score is 7.5 (High) with high ...

CVE-2026-87477

Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87602

CVE-2026-87602 is an out-of-bounds read in the ANGLE component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A remote attacker can read memory outside the sandbox by delivering a crafted HTML page to the user, requiring user interaction but no privileges. Chromium rate...