490954 matches found
CVE-2026-87629
A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...
CVE-2026-87615
A flaw was found in Chromium. A race condition in the Payments component allows a remote attacker to spoof user interface UI elements. This vulnerability can be exploited by leveraging social engineering through a specially crafted HTML page, potentially misleading users...
CVE-2026-87611
A flaw was found in Google Chrome. Missing authorization in the FileSystem component allows a remote attacker, who has already compromised the renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-87532
A flaw was found in Google Chrome's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...
CVE-2026-87651
A flaw was found in Google Chrome's Paint component. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to information from other web origins...
CVE-2026-87508
A flaw was found in the Loader component of Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions acro...
CVE-2026-87594
A flaw was found in Google Chrome's DataTransfer component. An issue with incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation can occur by enticing a user to visit a specially crafted HTML page...
CVE-2026-87600
A flaw was found in Google Chrome's Safebrowsing feature. This improper input validation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by enticing a user to open a specially crafted HTML page. This could lead to unauthorized access to...
CVE-2026-87584
A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By sending a specially crafted HTML page, an attacker could gain unauthorized access to sensitive functionalities within the browser's WebUI...
CVE-2026-87592
A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, a security...
CVE-2026-87539
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosure...
CVE-2026-87490
A flaw was found in the Transactions Platform of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...
CVE-2026-87496
A flaw was found in Google Chrome. A remote attacker, through social engineering, could present a specially crafted HTML page to spoof user interface UI elements. This UI misrepresentation could deceive users, potentially leading to information disclosure or unintended actions...
CVE-2026-87656
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87656
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87657
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87657
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...