CVE-2026-87506

A flaw was found in Google Chrome's WebUI. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to privilege elevation, allowing the attacker to execute arbitrary code outside o...

CVE-2026-87553

A flaw was found in SiteIsolation in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when the attacker provides a specially crafted HTML page, leadi...

CVE-2026-87449

A flaw was found in Google Chrome. This cross-site request forgery CSRF vulnerability, which tricks a web browser into executing an unwanted action on a trusted site where the user is authenticated, specifically affects the DeviceBoundSessionCredentials feature. A remote attacker can exploit this...

CVE-2026-87543

A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...

CVE-2026-87618

A flaw was found in Google Chrome. This vulnerability involves incorrect reference resolution within the browser's Storage component. A remote attacker, who has already compromised the browser's renderer process, could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2026-87502

A flaw was found in Google Chrome. This confused deputy vulnerability in the Fullscreen feature allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to spoof user interface UI elements. This can be achieved by presenting a specially crafted HTML pag...

CVE-2026-87620

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the Scalable Vector Graphics SVG rendering engine by enticing a user to open a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87623

A flaw was found in Google Chrome. An observable discrepancy in the Document Object Model DOM could be exploited by a remote attacker. By leveraging social engineering techniques and a specially crafted HTML page, an attacker could obtain sensitive user information...

CVE-2026-87486

A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...

CVE-2026-87593

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

CVE-2026-87445

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to user interface UI elements being spoofed, potentially misleading users and allowing for information disclosure...

CVE-2026-87580

A flaw was found in Google Chrome. An incorrect authorization vulnerability in WebAppInstalls could allow a remote attacker to bypass site isolation. This exploitation requires the attacker to first compromise the renderer process and then leverage social engineering through a crafted HTML page...

CVE-2026-87503

A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...

CVE-2026-87540

A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...

CVE-2026-87484

A flaw was found in Google Chrome. This vulnerability, located in the Geometry component, allows a remote attacker to spoof user interface UI elements. By leveraging social engineering and enticing a user to visit a specially crafted HTML page, an attacker could deceive the user. This deception...

CVE-2026-87599

A flaw was found in Google Chrome. Improper input validation within the Interstitials component allows a remote attacker to spoof user interface UI elements. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to deceptive visual information being...

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

CVE-2026-87567

A flaw was found in Google Chrome. This user interface UI misrepresentation in URL formatting allows a remote attacker to leverage social engineering techniques. By using a specially crafted domain name, the attacker can spoof the address bar, potentially deceiving users about the authenticity of...

CVE-2026-87595

A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...