CVE-2026-87499: Incorrect Authorization

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-87527: Heap-based Buffer Overflow

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-87636: Access of Resource Using Incompatible Type

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88618

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description An observable discrepancy in Safebrowsing allows a remote attacker who has compromised the renderer process to potentially obtain sensitive information through a crafted HTML pag...

PT-2026-88635

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 153.0.8010.36 Description An issue in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a specially crafted HTML page. This is caused by information loss or...

PT-2026-88652

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Missing authorization in TrustedWebActivities allows a local attacker to obtain sensitive information through a co-installed application. Recommendations Update Google Chrome...

PT-2026-88662

Name of the Vulnerable Software and Affected Versions Google Chrome for Mac versions prior to 153.0.8010.36 Description An incorrect reference resolution in the Accessibility component allows a remote attacker to potentially spoof UI elements by using a crafted HTML page. Recommendations Update...

CVE-2026-87467: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-87537: Missing Authorization

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87587: Use After Free

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87635: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87640: Out-of-bounds Read

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the GPU component on Mac allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page...

CVE-2026-87493: Missing Authorization

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88707

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Device component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-88709

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description A use after free issue exists in the Sharing component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remo...

PT-2026-88724

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker who has compromised the renderer process to spoof UI elements using a crafted HTML page...

PT-2026-88727

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 153.0.8010.36 Description An interpretation conflict in Safebrowsing allows a remote attacker to bypass system access restrictions through the use of a crafted file and social engineering. Recommendations...

Linux Distros Unpatched Vulnerability : CVE-2026-87493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-87499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site...