84414 matches found
CVE-2026-87520
CVE-2026-87520 is a use-after-free vulnerability in Dawn (Chromium's WebGPU implementation) affecting Google Chrome on Android prior to 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the sandbox . Chromium rates the security severity as ...
EUVD-2026-74494
Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-87554
CVE-2026-87554 is a race condition in Chromoting (Chrome's remote desktop component) affecting Google Chrome on Windows prior to 153.0.8010.36 . A local attacker can exploit the flaw via a local program to execute arbitrary code outside the sandbox , rated High severity by Chromium and 8.1 (HIGH)...
CVE-2026-87554
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
EUVD-2026-74499
Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-74496
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...
EUVD-2026-74495
Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87520
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-74498
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87467
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87517
A race condition in the Mobile component of Google Chrome on iOS prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to bypass the web origin policy via a crafted HTML page. The CNA-assigned CVSS 3.1 score is 3.1 (Low) , reflecting high attack complexity and r...
CVE-2026-87517
Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-74497
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87447
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: High...
CVE-2026-87447
CVE-2026-87447 is an incorrect authorization flaw in the Network component of Google Chrome prior to version 153.0.8010.36 . A remote attacker leveraging social engineering could use a crafted Chrome extension to bypass the web origin policy . The CVSS 3.1 score is 6.5 (Medium) (AV:N/AC:L/PR:N/UI...
EUVD-2026-74488
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87440
An out-of-bounds read in the Media component of Google Chrome (prior to 153.0.8010.36 ) allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium rates the severity as High , and the assigned CVSS 3.1 score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...
CVE-2026-87633
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
CVE-2026-87633
A use-after-free vulnerability in the Views component of Google Chrome prior to version 153.0.8010.36 allows a local attacker with no prior privileges to execute arbitrary code outside the browser sandbox by inducing UI interaction. The Chromium security team rates the severity as High , with a C...