CVE-2026-87634

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87610

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87610

A vulnerability in the Omnibox of Google Chrome (and Microsoft Edge ) prior to version 153.0.8010.36 allows a remote attacker to bypass system access restrictions. By utilizing a crafted HTML page , an attacker can gain access to a privileged page . This issue is categorized as an incorrect autho...

EUVD-2026-74428

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87610

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87653

UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74421

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87528

A type confusion vulnerability exists in the Rust component of Google Chrome on Windows (versions prior to 153.0.8010.36 ). A remote attacker could leverage this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandbox . Microsoft Edge, being Chromium-based, is also ...

CVE-2026-87566

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87455

Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87623

A vulnerability in Google Chrome prior to version 153.0.8010.36 allows a remote attacker to obtain sensitive information via a crafted HTML page by leveraging social engineering . The root cause is an observable discrepancy in the DOM . This vulnerability also affects Microsoft Edge , which inges...

CVE-2026-87638

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87566

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74423

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87455

A use after free vulnerability in Aura within Google Chrome (prior to version 153.0.8010.36 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. The vulnerability is classified with a Medium security severity by Chromium and a ...

CVE-2026-87566

Google Chrome (prior to version 153.0.8010.36 ) is vulnerable to an observable discrepancy in Layout (CWE-203). A remote attacker can exploit this flaw by using a crafted HTML page to leak sensitive information. This vulnerability affects Chromium-based browsers, including Microsoft Edge and vers...

CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87584

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...