CVE-2026-87503

A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...

CVE-2026-87540

A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87484

A flaw was found in Google Chrome. This vulnerability, located in the Geometry component, allows a remote attacker to spoof user interface UI elements. By leveraging social engineering and enticing a user to visit a specially crafted HTML page, an attacker could deceive the user. This deception...

CVE-2026-87565

A flaw was found in Google Chrome on Android. A remote attacker could exploit an information leak in the Passwords component by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87640

A flaw was found in WebView in Google Chrome on Android. A remote attacker who has compromised the renderer process could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to the disclosure of memory outside of the sandbox, potentially exposing sensiti...

CVE-2026-87649

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...

CVE-2026-87595

A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...

CVE-2026-87559

A flaw was found in Chromium. A remote attacker, by leveraging social engineering tactics and providing a specially crafted HTML page, could spoof user interface UI elements. This misrepresentation of the UI could deceive users...

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87606

A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...

CVE-2026-87579

A flaw was found in WebRTC within Google Chrome. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-87536

A flaw was found in Google Chrome's V8 engine. This use-after-free vulnerability allows a remote attacker to execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker can exploit this flaw. This could lead to the execution of malicious code within the...

CVE-2026-87610

A flaw was found in Omnibox in Google Chrome. A remote attacker could exploit an incorrect authorization vulnerability by sending a specially crafted HTML page. This could allow the attacker to bypass system access restrictions and gain access to a privileged page...

CVE-2026-87462

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering, could exploit a user interface UI misrepresentation in the Federated Credential Management FedCM component. This vulnerability allows the attacker to spoof UI elements through a specially crafted HTML page,...

CVE-2026-87440

A flaw was found in Google Chrome. This vulnerability, an out-of-bounds read in the Media component, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw to run malicious code within the browser's securit...

CVE-2026-87629

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...

CVE-2026-87532

A flaw was found in Google Chrome's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...

CVE-2026-87600

A flaw was found in Google Chrome's Safebrowsing feature. This improper input validation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by enticing a user to open a specially crafted HTML page. This could lead to unauthorized access to...

CVE-2026-87539

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosure...