EUVD-2026-74407

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87468

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87510

Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87493

CVE-2026-87493 is a missing authorization flaw in the FileSystem component of Google Chrome prior to version 153.0.8010.36 . A remote attacker, leveraging social engineering, can bypass system access restrictions by serving a crafted HTML page. The CVSS 3.1 score is 6.5 (Medium) , with the primar...

CVE-2026-87641

A race condition in the Browser component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability is rated Medium severity by Chromium and scored 4.2 (CVSS 3.1) by NVD, reflecting high attack ...

CVE-2026-87535

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87641

Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87641

Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87494

Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87589

CVE-2026-87589 is an incorrect authorization flaw in SiteIsolation in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass system access restrictions . The Chromium security team rates the severity a...

CVE-2026-87483

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87483

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74398

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87589

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87454

Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87454

Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87483

CVE-2026-87483 is an incorrect authorization flaw in Google Chrome on Android prior to 153.0.8010.36 , rated Medium severity by Chromium. A remote attacker could bypass system access restrictions by serving a crafted HTML page to the user, requiring no special privileges but user interaction to t...

CVE-2026-87454

CVE-2026-87454 is an information leak in Google Chrome Enterprise on Windows , affecting versions prior to 153.0.8010.36 . A remote attacker can obtain sensitive information by luring a user into visiting a crafted HTML page . The vulnerability is rated Medium severity (CVSS 3.1: 6.5, vector AV:N...

EUVD-2026-74397

Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...