CVE-2026-95336

Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95363

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw within the FileSystem component. A remote attacker can utilize social engineering and a crafted HTML page to spoof UI elements. Remediation is available in version 154.0.8037.57 , with specific fixes confi...

CVE-2026-95314

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in the HID component. A remote attacker who has already compromised the renderer process can exploit this issue via a crafted HTML page to bypass system access restrictions. This vulnerability has been...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89117

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Google Chrome versions prior to 154.0.8037.57 are vulnerable to improper state validation in the Downloads component. This flaw allows a remote attacker to bypass system access restrictions by navigating to a crafted HTML page . The impact is rated as Medium by Chromium security standards. Remedi...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95370

An inappropriate implementation in the NFC component of Google Chrome prior to version 154.0.8037.57 allows a remote attacker to bypass system access restrictions through a crafted HTML page. This vulnerability is categorized with Medium security severity by Chromium. Remediation is available in ...

CVE-2026-95337

UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95337

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to a UI misrepresentation flaw in Messages . A remote attacker can leverage social engineering to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; for example, Debian provides ...

CVE-2026-95369

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95369

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a vulnerability involving an inappropriate implementation in XML . A remote attacker could exploit this via a crafted HTML page to potentially execute arbitrary code inside the sandbox . Remediation is available in version 154.0.8037...

CVE-2026-95369

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...