EUVD-2026-79986

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91723

CVE-2026-91723 is a race condition in the WebAppInstalls component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit a crafted HTML page to spoof UI elements , rated Medium by Chromium's security team. The fix is available in Chrome 153.0.8010.47. No exploitation or ...

CVE-2026-91714

Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91714

An observable discrepancy in the Fonts component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker, leveraging social engineering , to leak sensitive information via a crafted HTML page. The vulnerability is rated Medium severity by Chromium. Remediation is available by updating t...

EUVD-2026-79988

Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91732

CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and a crafted HTML page, bypass the web origin policy ....

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-79984

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91711

CVE-2026-91711 is an out-of-bounds write in the ServiceWorker component of Google Chrome prior to 153.0.8010.47 . A remote attacker can execute arbitrary code inside the sandbox by delivering a crafted HTML page . The Chromium security severity is rated High . The vulnerability is fixed in Chrome...

CVE-2026-91711

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91737

CVE-2026-91737 is a use-after-free vulnerability in the PDF component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can leverage a crafted HTML page to execute arbitrary code inside the Chrome sandbox . Chromium rates the security severity as High . The fix is available in C...

CVE-2026-91715

A type confusion vulnerability in the ServiceWorker component of Google Chrome (versions prior to 153.0.8010.47 ) allowed a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The Chromium project assigned a High severity rating. The fix is included in Chr...

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79980

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91729

This vulnerability is a use-after-free in the DigitalCredentials component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker, leveraging social engineering , could exploit the flaw via a crafted HTML page to execute arbitrary code outside the browser sandbox . Chrom...

CVE-2026-91715

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79982

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91745

CVE-2026-91745 is a use-after-free vulnerability in the V8 engine of Google Chrome prior to 153.0.8010.47 . A remote attacker can exploit it by serving a crafted HTML page , leading to arbitrary code execution inside the sandbox . Chromium classifies this with a High security severity. The fix is...