CVE-2026-11083

A vulnerability in the Password Manager component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.53 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is identified as an inappropriate implementation and a lack of mechanisms for verifyin...

CVE-2026-11083

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11084

Google Chrome and Microsoft Edge (Chromium-based) are affected by CVE-2026-11084 , where an inappropriate implementation in the Password Manager component allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is attributed to a lack of mechanisms for verifying...

CVE-2026-11083

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11084

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

A use-after-free vulnerability exists in the Password Manager component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.53 . The root cause is the reuse of memory resources after they have been freed, which could allow a remote attacker to execute arbitrary code inside a sandbo...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11032

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11032

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11032

The Password Manager component in Google Chrome (and Microsoft Edge ) is vulnerable to an inappropriate implementation that lacks sufficient mechanisms for verifying data sources. A remote attacker can exploit this flaw by using a crafted HTML page to leak cross-origin data or gain unauthorized a...

CVE-2026-11032

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11031

Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11031

The Password Manager in Google Chrome (and Chromium-based browsers like Microsoft Edge ) is vulnerable to UI spoofing due to insufficient validation of untrusted input. A remote attacker can exploit this via malicious network traffic. The issue is fixed in version 149.0.7827.53 . For Debian users...

CVE-2026-11031

Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11031

Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11011

The Google Chrome and Microsoft Edge browsers are vulnerable due to insufficient policy enforcement in the Password Manager component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . This vulnerability affects versions of G...

CVE-2026-11011

Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11011

Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...