CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87501

CVE-2026-87501 is a UI misrepresentation vulnerability in the Passwords component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit it by serving a crafted HTML page to spoof UI elements , potentially misleading users interacting with the browser's password managem...

CVE-2026-87548

CVE-2026-87548 affects the Installer component of Google Chrome prior to version 153.0.8010.36 . The root cause is an improper state validation flaw, which allows a remote attacker to bypass system access restrictions via a crafted HTML page. The vulnerability requires user interaction (the attac...

CVE-2026-87516

A medium-severity vulnerability in the Navigation component of Google Chrome prior to 153.0.8010.36 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is described as an observable discrepancy in the Navigation subsystem. The CVSS v3.1 base score is 4.3 (AV...

CVE-2026-87452

CVE-2026-87452 is an incorrect authorization flaw in the GPU component of Google Chrome on Mac prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page. The vulnerability carries a...

CVE-2026-87516

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87599

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74360

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87452

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74362

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74361

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87548

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87599

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87501

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74366

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87548

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87507

CVE-2026-87507 is a UI misrepresentation vulnerability in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker, leveraging social engineering, could spoof UI elements via a crafted HTML page, potentially tricking users into interacting with malicious content disguis...

CVE-2026-87501

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87507

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...