CVE-2026-87551

CVE-2026-87551 addresses an improper certificate validation flaw in the CORS (Cross-Origin Resource Sharing) implementation of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering could use crafted network traffic to bypass the web origin policy , potentially acc...

CVE-2026-87571

CVE-2026-87571 is an improper certificate validation flaw in the Loader component of Google Chrome prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could craft network traffic to bypass web origin policy . Chromium assigned the vulnerability a Low security severity. The...

EUVD-2026-74471

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87469

CVE-2026-87469 is an improper input validation vulnerability in the Extensions component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can leverage crafted network traffic to bypass web origin policy and gain access to a privileged page. Chromium classifies the severity as L...

EUVD-2026-74468

Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...

CVE-2026-87463

Google Chrome on Android prior to version 153.0.8010.36 is affected by an incorrect authorization flaw in the Certificate component. A remote attacker can potentially spoof the address bar via crafted network traffic, which may mislead users about the identity of a site they are visiting. The fla...

EUVD-2026-74441

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-87522

CVE-2026-87522 is a missing authorization vulnerability in the WebView component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could potentially bypass system access restrictions via crafted network traffic. The Chromium ...

CVE-2026-87568

CVE-2026-87568 is an improper input validation flaw in the Chromium engine of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could spoof UI elements by sending crafted network traffic. Chromium rates the severity as Low , consistent with ...

EUVD-2026-74427

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-74429

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

A use-after-free vulnerability in the Sharing component of Google Chrome on iOS prior to version 153.0.8010.36 allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. The flaw requires user interaction and no prior privileges. The CNA-assigned CVSS 3.1 ...

CVE-2026-87590

CVE-2026-87590 is an improper input validation vulnerability in the Passwords component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could exploit crafted network traffic to potentially leak sensitive information. The Chromium security team rated this issue as ...

EUVD-2026-74338

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-74323

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87578

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-87578

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-87628

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

PT-2026-88708

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...