CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79995

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91719

CVE-2026-91719 is a code injection in XML vulnerability in Google Chrome prior to version 153.0.8010.47 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.47 ...

CVE-2026-91722

CVE-2026-91722 is a use-after-free vulnerability in the Input component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the user. The vulnerability carries a Medium severity rating per...

EUVD-2026-79993

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79994

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79989

Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79991

Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91725

Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79992

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91713

Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91713

CVE-2026-91713 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could spoof UI elements via a crafted HTML page, rated Medium by Chromium. The fix is available in ...

CVE-2026-91739

CVE-2026-91739 is a missing authorization vulnerability in the Transactions Platform of Google Chrome , affecting versions prior to 153.0.8010.47 . The flaw allowed a remote attacker who had already compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium rated the ...

CVE-2026-91739

Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91725

Google Chrome prior to version 153.0.8010.47 is affected by an observable discrepancy in CSS that allows a remote attacker to leak sensitive information by delivering a crafted HTML page. Chromium rates the severity as Medium . No confirmed exploitation details are provided in the available docum...

EUVD-2026-79985

Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91723

Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79986

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91723

CVE-2026-91723 is a race condition in the WebAppInstalls component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit a crafted HTML page to spoof UI elements , rated Medium by Chromium's security team. The fix is available in Chrome 153.0.8010.47. No exploitation or ...

CVE-2026-91714

An observable discrepancy in the Fonts component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker, leveraging social engineering , to leak sensitive information via a crafted HTML page. The vulnerability is rated Medium severity by Chromium. Remediation is available by updating t...