Lucene search
+L

39950 matches found

Debian CVE
Debian CVE
added 2026/09/09 12:09 a.m.11 views

CVE-2026-87573

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00208EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/09 12:09 a.m.4 views

EUVD-2026-74357

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00247EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/09 12:09 a.m.37 views

CVE-2026-87508

CVE-2026-87508 is an incorrect authorization flaw in the Loader component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass the web origin policy , resulting in limited confidentiality impact. The vulnerability requires use...

4.3CVSS0.00247EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.36 views

CVE-2026-87573

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00208EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.36 views

CVE-2026-87508

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00247EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/09 12:09 a.m.6 views

EUVD-2026-74359

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00208EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/09 12:09 a.m.59 views

CVE-2026-87573

CVE-2026-87573 is an improper input validation vulnerability in the Network component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can bypass the web origin policy by serving a crafted HTML page, leading to a low confidentiality impact (no integrity or availability impact p...

4.3CVSS0.00208EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/09/09 12:09 a.m.6 views

EUVD-2026-74347

Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

8.3CVSS0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.35 views

CVE-2026-87479

Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

0.00345EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/09 12:09 a.m.19 views

CVE-2026-87479

CVE-2026-87479 is an insufficient policy enforcement vulnerability in the Extensions component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage social engineering and a crafted HTML page to execute arb...

8.3CVSS0.00345EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/09/09 12:09 a.m.13 views

CVE-2026-87479

Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

8.3CVSS6.8AI score0.00345EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/09 12:09 a.m.7 views

EUVD-2026-74346

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

0.00331EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/09 12:09 a.m.17 views

CVE-2026-87436

CVE-2026-87436 is an incomplete cleanup flaw in the Browser component of Google Chrome prior to 153.0.8010.36 , allowing a remote attacker leveraging social engineering to bypass the web origin policy via a crafted Chrome extension. The CVSS 3.1 score is 6.5 (Medium) with an attack vector of netw...

6.5CVSS0.00331EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/09/09 12:09 a.m.13 views

CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00331EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/09 12:09 a.m.9 views

CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.32 views

CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.37 views

CVE-2026-87449

Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00207EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.36 views

CVE-2026-87577

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

0.00197EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/09/09 12:09 a.m.6 views

EUVD-2026-74332

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00197EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/09/09 12:09 a.m.6 views

EUVD-2026-74333

Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00207EPSS
SaveExploits0References2
Rows per page
Query Builder