CVE-2026-87642

A flaw was found in WebGL within Chromium. An uninitialized resource vulnerability allows a remote attacker to leak sensitive cross-origin data. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-87540

A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...

CVE-2026-87568

A flaw was found in Chromium. This improper input validation vulnerability allows a remote attacker, who has compromised the renderer process, to spoof user interface UI elements. This can be achieved by sending crafted network traffic, potentially deceiving users or leading to further attacks...

CVE-2026-87599

A flaw was found in Google Chrome. Improper input validation within the Interstitials component allows a remote attacker to spoof user interface UI elements. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to deceptive visual information being...

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

CVE-2026-87655

A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...

CVE-2026-87559

A flaw was found in Chromium. A remote attacker, by leveraging social engineering tactics and providing a specially crafted HTML page, could spoof user interface UI elements. This misrepresentation of the UI could deceive users...

CVE-2026-87603

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this missing authorization vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorize...

CVE-2026-87590

A flaw was found in chromium-browser. Improper input validation in the Passwords component of Google Chrome allows a remote attacker to potentially leak sensitive information by sending crafted network traffic...

CVE-2026-87563

A flaw was found in Paint in Google Chrome. An origin validation error allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This vulnerability could lead to information disclosure...

CVE-2026-87536

A flaw was found in Google Chrome's V8 engine. This use-after-free vulnerability allows a remote attacker to execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker can exploit this flaw. This could lead to the execution of malicious code within the...

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-39987

CVE-2026-39987 Marimo RCE Pre-Autenticación 📋 Información de la Vulnerabilidad...

kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode

A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...

CVE-2026-87724

Tor versions prior to 0.4.9.12 are affected by a denial-of-service vulnerability (TROVE-2026-032) in the congestion-control mechanism. The underlying cause is that Tor interprets the CC_RESPONSE extension even when CC_REQUEST was never sent, leading to a corrupted congestion-control state and an ...

CVE-2026-87610

A flaw was found in Omnibox in Google Chrome. A remote attacker could exploit an incorrect authorization vulnerability by sending a specially crafted HTML page. This could allow the attacker to bypass system access restrictions and gain access to a privileged page...

CVE-2026-87511

A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...

CVE-2026-87542

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the input handling, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, an attacker could bypass security measures and run malicious code within the...

CVE-2026-87440

A flaw was found in Google Chrome. This vulnerability, an out-of-bounds read in the Media component, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw to run malicious code within the browser's securit...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...