CVE-2026-87487

Missing authorization in the FileSystem component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker, who had already compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium p...

EUVD-2026-74532

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74527

Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87478

An observable discrepancy in the Autofill component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page . The vulnerability carries a Medium Chromium security severity and a CVSS 3.1 score of 6.5 (AV:N/AC:L/PR...

EUVD-2026-74529

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87446

CVE-2026-87446 is a Medium -severity vulnerability in the Extensions component of Google Chrome , present in versions prior to 153.0.8010.36 . The root cause is an incomplete cleanup within the Extensions subsystem, which allowed a remote attacker—leveraging social engineering and a crafted Chrom...

CVE-2026-87491

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87504

CVE-2026-87504 is a use-after-free in the Core component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted Chrome extension . Chromium rates the severity as Medium , while the...

CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87478

Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87491

CVE-2026-87491 is an out of bounds write vulnerability in V8 , the JavaScript engine used by Google Chrome . The flaw allows a remote attacker to execute arbitrary code inside the Chrome sandbox by delivering a crafted HTML page to the user. The issue is fixed in Chrome 153.0.8010.36 . The CNA-as...

CVE-2026-87657

A use-after-free flaw in the V8 engine of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to read memory inside the sandbox by loading a crafted HTML page. The Chromium security team rated this Medium severity, and NVD assigned a CVS...

CVE-2026-87491

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74530

Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87491

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87640

CVE-2026-87640 is an out-of-bounds read in the WebView component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the sandbox . The vulnerability is ...

CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87504

Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87504

Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87612

CVE-2026-87612 is a type confusion vulnerability in the V8 JavaScript engine within Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox , requiring user interaction (visiting a malicious page)....