CVE-2026-87472

CVE-2026-87472 is an improper input validation vulnerability in the FedCM (Federated Credential Management) component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to spoof UI elements ...

CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74369

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87655

CVE-2026-87655 is a clickjacking vulnerability in the Downloads component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker, leveraging social engineering , could spoof UI elements via a crafted HTML page. The Chromium security severity is rated Medium , with a CVSS...

CVE-2026-87445

UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87472

Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74371

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87462

Google Chrome prior to 153.0.8010.36 contained a UI misrepresentation in FedCM (Federated Credential Management), allowing a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. The vulnerability is rated Medium severity (CVSS 3.1: 5.4 , AV:N/AC:L/PR:N/UI:R/...

EUVD-2026-74363

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

CVE-2026-87452 is an incorrect authorization flaw in the GPU component of Google Chrome on Mac prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page. The vulnerability carries a...

CVE-2026-87516

A medium-severity vulnerability in the Navigation component of Google Chrome prior to 153.0.8010.36 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is described as an observable discrepancy in the Navigation subsystem. The CVSS v3.1 base score is 4.3 (AV...

EUVD-2026-74364

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87559

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87501

CVE-2026-87501 is a UI misrepresentation vulnerability in the Passwords component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit it by serving a crafted HTML page to spoof UI elements , potentially misleading users interacting with the browser's password managem...

CVE-2026-87548

CVE-2026-87548 affects the Installer component of Google Chrome prior to version 153.0.8010.36 . The root cause is an improper state validation flaw, which allows a remote attacker to bypass system access restrictions via a crafted HTML page. The vulnerability requires user interaction (the attac...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...