CVE-2026-87551

A flaw was found in chromium-browser. This vulnerability involves improper certificate validation within the Cross-Origin Resource Sharing CORS mechanism. A remote attacker, by leveraging social engineering tactics and crafted network traffic, could bypass the web origin policy. This could lead t...

CVE-2026-87437

A flaw was found in Google Chrome's Frames component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the leakage of sensitive information...

CVE-2026-87602

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read memory outside of the browser's security sandbox, leading to information...

CVE-2026-87544

A flaw was found in Chromium. A remote attacker could exploit incorrect authorization in Extensions by crafting a malicious HTML page. This could allow the attacker to bypass system access restrictions and gain access to a privileged page...

CVE-2026-87571

A flaw was found in Google Chrome. Improper certificate validation in the Loader component allows a remote attacker, through social engineering and crafted network traffic, to bypass the web origin policy. This bypass could enable an attacker to circumvent security restrictions designed to isolat...

CVE-2026-87469

A flaw was found in Extensions in Google Chrome. Improper input validation allows a remote attacker to bypass the web origin policy. This can lead to unauthorized access to privileged pages through specially crafted network traffic...

CVE-2026-87463

A flaw was found in chromium-browser. This incorrect authorization in the Certificate component allows a remote attacker to potentially spoof the address bar. This could lead to users being misled about the authenticity of a website...

CVE-2026-97721

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

CVE-2026-87656

A flaw was found in Chromium's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...

CVE-2026-87631

A flaw was found in Google Chrome. Missing authorization in the Document Object Model DOM could allow a remote attacker to potentially leak sensitive information. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-87575

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Loader component allows a remote attacker, through social engineering, to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page, leading to unauthorized...

CVE-2026-87546

A flaw was found in the Safebrowsing component of Chromium. An incorrect type conversion or cast vulnerability allows a remote attacker to bypass system access restrictions by providing a specially crafted file. This could lead to unauthorized access to system resources...

CVE-2026-87522

A flaw was found in WebView in Google Chrome on Android. Missing authorization allows a remote attacker, by leveraging social engineering and crafted network traffic, to potentially bypass system access restrictions. This could lead to unauthorized access to sensitive system functions...

CVE-2026-87477

A flaw was found in Core in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation would result in the leakage of sensitive information...

CVE-2026-87473

A flaw was found in the FileHandling component of Google Chrome. A remote attacker could exploit this vulnerability by leveraging social engineering techniques with a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthoriz...

CVE-2026-87641

A flaw was found in the Chromium Browser. A remote attacker could exploit a race condition by enticing a user to visit a specially crafted HTML page. This vulnerability could allow the attacker to bypass system access restrictions...

CVE-2026-87560

A flaw was found in Chromium Browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87562

A flaw was found in chromium-browser. A remote attacker could exploit incorrect reference resolution in the Accessibility feature by enticing a user to visit a specially crafted HTML page. This could allow the attacker to potentially spoof user interface UI elements, leading to confusion or...

CVE-2026-87577

A flaw was found in Chromium. A remote attacker could exploit an authorization vulnerability by creating a specially designed web page. This could allow the attacker to bypass security restrictions, known as the web origin policy, and access sensitive information or functionality on a privileged...

CVE-2026-87549

A flaw was found in Google Chrome. An incomplete cleanup process within the Downloads feature allows a remote attacker, through social engineering and a specially crafted HTML page, to bypass system access restrictions. This could lead to unauthorized access to sensitive system resources...