490100 matches found
CVE-2026-87631
CVE-2026-87631 is a missing authorization vulnerability in the DOM component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can potentially leak sensitive information by serving a crafted HTML page to a victim who interacts with it (user interaction required). Ch...
CVE-2026-87631
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87473
Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87575
An incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to bypass system access restrictions. The flaw is rated Low severity by Chromium and scores 5.4 (Mediu...
EUVD-2026-74470
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74467
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74468
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...
EUVD-2026-74465
Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87469
CVE-2026-87469 is an improper input validation flaw in Extensions within Google Chrome prior to 153.0.8010.36 . A remote attacker can use crafted network traffic to bypass the web origin policy into a privileged page. The Chromium security severity is rated Low , with a CVSS 3.1 score of 4.3 (Med...
CVE-2026-87575
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87605
CVE-2026-87605 is a missing authorization vulnerability in the Contacts component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and serving a crafted HTML page, potentially obtain sensit...
CVE-2026-87490
An information disclosure vulnerability in the Transactions Platform component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information by convincing a user to visit a crafted HTML page . The underlying root-cause mechanism beyond the crafted-page ...
CVE-2026-87490
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74460
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87583
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74463
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87624
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74462
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87583
A UI misrepresentation vulnerability in the Passwords component of Google Chrome on Android (prior to 153.0.8010.36 ) allows a remote attacker to spoof UI elements via a crafted HTML page. The attacker requires user interaction but no prior privileges, with the primary consequence being low impac...