39948 matches found
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87614
CVE-2026-87614 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could bypass the web origin policy via a crafted HTML page. Chromium rates the severity as Low (CVSS 3.1 ba...
EUVD-2026-74429
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-87626
CVE-2026-87626 is an incorrect authorization flaw in the DeviceBoundSessionCredentials component of Google Chrome prior to 153.0.8010.36 . A remote attacker can bypass the web origin policy via crafted network traffic, resulting in a high integrity impact with no confidentiality or availability i...
CVE-2026-87626
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-87632
Google Chrome prior to 153.0.8010.36 is affected by a cross-site scripting vulnerability in the SanitizerAPI component. A remote attacker can deliver a crafted HTML page that bypasses the web origin policy , enabling unauthorized script execution in the context of another origin. The vulnerabilit...
EUVD-2026-74419
Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87632
Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87632
Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74396
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87550
CVE-2026-87550 is an improper encoding or escaping flaw in CSS output in Google Chrome prior to 153.0.8010.36 , allowing a remote attacker to bypass the web origin policy via a crafted HTML page. The Chromium security team rated the severity as Medium (CVSS 4.3), requiring user interaction with n...
CVE-2026-87550
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87550
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87622
CVE-2026-87622 is a Medium -severity vulnerability (CVSS 4.3) in Google Chrome 's FedCM (Federated Credential Management) component. A missing authorization check allowed a remote attacker to bypass the web origin policy by serving a crafted HTML page that required user interaction. The flaw affe...
CVE-2026-87622
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74389
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87622
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87508
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...