CVE-2026-87518

An observable discrepancy in Safebrowsing within Google Chrome on iOS (prior to version 153.0.8010.36) allows a remote attacker who has compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. This vulnerability is also present in Microsoft Edge (Chrom...

CVE-2026-87518

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74340

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87482

A flaw in the HttpsUpgrades feature of Chromium (including Google Chrome and Microsoft Edge ) allows a remote attacker to send crafted network traffic to intercept and expose sensitive information. This occurs because the feature fails to properly enforce encrypted connections, leading to the cle...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87517

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-87517

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74494

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-87517

A race condition flaw exists in the Mobile component of the Chromium browser, affecting Google Chrome on iOS prior to version 153.0.8010.36 . A remote attacker could exploit this vulnerability using social engineering and a crafted HTML page to bypass the web origin policy . This issue also impac...

CVE-2026-87517

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-88582

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description Cleartext transmission of sensitive data in HttpsUpgrades allows a remote attacker to leak sensitive information via crafted network traffic. Recommendations Update Google Chrome...

PT-2026-88645

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description An information leak exists in the mobile version of the browser that allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering t...

Linux Distros Unpatched Vulnerability : CVE-2026-87518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-87482: Cleartext Transmission of Sensitive Information

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87517: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-87518: Observable Discrepancy

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87609: Use After Free

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy v...