CVE-2026-87565

CVE-2026-87565 is an information disclosure vulnerability in Google Chrome for Android prior to 153.0.8010.36 , affecting the Passwords component. A remote attacker can exploit it by serving a crafted HTML page to leak sensitive information, with no privileges required but user interaction necess...

CVE-2026-87459

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87620

CVE-2026-87620 affects the SVG rendering component in Google Chrome prior to 153.0.8010.36 . An observable discrepancy in SVG processing allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The vulnerability requires user interaction (visiting a malicious page...

CVE-2026-87620

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87620

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74451

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87543

Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87543

Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87656

CVE-2026-87656 is an improper state validation vulnerability in Google Chrome's Safebrowsing component, affecting versions prior to 153.0.8010.36 . A remote attacker could exploit it via a crafted HTML page to bypass system access restrictions . The NVD assigns a CVSS 3.1 score of 5.4 (MEDIUM) wi...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87511

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87543

Google Chrome prior to 153.0.8010.36 contained a missing authorization flaw in the Core component. A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass site isolation , a key sandboxing boundary in Chrome's multi-process architectur...

EUVD-2026-74444

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-74442

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-87568

CVE-2026-87568 affects Chromium in Google Chrome prior to 153.0.8010.36 . An improper input validation flaw allowed a remote attacker who had already compromised the renderer process to spoof UI elements via crafted network traffic. Chromium rated the severity as Low ; NVD assigned CVSS 4.3 (Medi...

CVE-2026-87619

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87619

CVE-2026-87619 affects Google Chrome prior to 153.0.8010.36 , where an observable discrepancy in the Prefetch mechanism allowed a remote attacker to leak cross-origin data via a crafted HTML page. The Chromium team rated this Low severity; NVD scores it CVSS 4.3 (Medium) with a network vector, lo...

CVE-2026-87598

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin...

Linux Distros Unpatched Vulnerability : CVE-2026-87544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged...