CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87589

A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...

CVE-2026-87624

Google Chrome for Android is affected by a UI misrepresentation vulnerability in the Passwords component, fixed in version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could spoof UI elements via a crafted HTML page. The CVSS 3.1 score is 4.2 (Medium) , refle...

EUVD-2026-74433

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87614

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87435

Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87435

CVE-2026-87435 is an information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by serving a crafted HTML page. The Chromium security severity is Medium , with a CVSS 3.1 score...

CVE-2026-87616

An improper initialization flaw in the Views component of Google Chrome on Windows (versions prior to 153.0.8010.36 ) allows a remote attacker who has already compromised the renderer process and leverages social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. C...

CVE-2026-87589

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74392

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74382

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

CVE-2026-87451

CVE-2026-87451 is an information leak in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain cross-origin data via a crafted HTML page. The vulnerability is rated Medium by Chromium and carries a CVSS 3....

CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

CVE-2026-87432

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87432

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74322

Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87537

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87471

CVE-2026-87471 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 153.0.8010.36 . An attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , potentially escalating access to data protected by ...