85029 matches found
CVE-2026-91725
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91713
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91739
CVE-2026-91739 is a missing authorization vulnerability in the Transactions Platform of Google Chrome , affecting versions prior to 153.0.8010.47 . The flaw allowed a remote attacker who had already compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium rated the ...
CVE-2026-91713
CVE-2026-91713 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could spoof UI elements via a crafted HTML page, rated Medium by Chromium. The fix is available in ...
CVE-2026-91739
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91725
Google Chrome prior to version 153.0.8010.47 is affected by an observable discrepancy in CSS that allows a remote attacker to leak sensitive information by delivering a crafted HTML page. Chromium rates the severity as Medium . No confirmed exploitation details are provided in the available docum...
EUVD-2026-79986
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-79985
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91723
CVE-2026-91723 is a race condition in the WebAppInstalls component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit a crafted HTML page to spoof UI elements , rated Medium by Chromium's security team. The fix is available in Chrome 153.0.8010.47. No exploitation or ...
CVE-2026-91732
CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and a crafted HTML page, bypass the web origin policy ....
EUVD-2026-79988
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91714
An observable discrepancy in the Fonts component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker, leveraging social engineering , to leak sensitive information via a crafted HTML page. The vulnerability is rated Medium severity by Chromium. Remediation is available by updating t...
CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-79984
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91711
CVE-2026-91711 is an out-of-bounds write in the ServiceWorker component of Google Chrome prior to 153.0.8010.47 . A remote attacker can execute arbitrary code inside the sandbox by delivering a crafted HTML page . The Chromium security severity is rated High . The vulnerability is fixed in Chrome...
CVE-2026-91737
CVE-2026-91737 is a use-after-free vulnerability in the PDF component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can leverage a crafted HTML page to execute arbitrary code inside the Chrome sandbox . Chromium rates the security severity as High . The fix is available in C...
CVE-2026-91715
A type confusion vulnerability in the ServiceWorker component of Google Chrome (versions prior to 153.0.8010.47 ) allowed a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The Chromium project assigned a High severity rating. The fix is included in Chr...