CVE-2026-91732

CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and a crafted HTML page, bypass the web origin policy ....

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91711

CVE-2026-91711 is an out-of-bounds write in the ServiceWorker component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit it by luring a user into visiting a crafted HTML page , leading to arbitrary code execution within the browser's sandbox . The vulne...

CVE-2026-91715

A type confusion flaw in the ServiceWorker component of Google Chrome (Chromium) prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The bug was reported by Cristian Di Nicola on 2026-09-07 (Chromium issu...

CVE-2026-91737

CVE-2026-91737 is a Use after free in the PDF component of Google Chrome prior to 153.0.8010.47 , rated High severity with a CVSS v3.1 score of 8.8 (network vector, user interaction required). A remote attacker can execute arbitrary code inside the sandbox by convincing a user to open a crafted H...

EUVD-2026-79984

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91711

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91715

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91711

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91729

CVE-2026-91729 is a use-after-free vulnerability in DigitalCredentials in Google Chrome prior to 153.0.8010.47 , reported by researcher sean geofrey on 2026-09-04 (bug 557206809 ). A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted HTML pa...

EUVD-2026-79980

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79981

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79982

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91745

A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to version 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the browser's security sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rated this High severit...

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...