983 matches found
CVE-2026-87649
A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...
CVE-2026-87641
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87560
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87589
A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...
EUVD-2026-74446
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87493
CVE-2026-87493 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by delivering a crafted HTML page to the victim. Chromium rates this as Medium severi...
CVE-2026-87532
This vulnerability affects the Safebrowsing component in Google Chrome versions prior to 153.0.8010.36 . An improper state validation flaw allows a remote attacker to bypass system access restrictions by serving a crafted HTML page to a victim. Chromium rates the security severity as Medium . The...
CVE-2026-87446
CVE-2026-87446 is a Medium -severity vulnerability in the Extensions component of Google Chrome , present in versions prior to 153.0.8010.36 . The root cause is an incomplete cleanup within the Extensions subsystem, which allowed a remote attacker—leveraging social engineering and a crafted Chrom...
PT-2026-88632
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88656
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88689
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85043
Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...
EUVD-2026-69738
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
CVE-2026-84325
CVE-2026-84325 is an improper input validation vulnerability in the DataTransfer component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can bypass system access restrictions via a co-installed app. Chromium rates this as High severity; the CNA-assigned...
CVE-2026-80713 io_uring: preserve task restrictions across exec
In the Linux kernel, the following vulnerability has been resolved: iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used iouring, the exec cancellation path call...
CVE-2026-79025
A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...
Linux Distros Unpatched Vulnerability : CVE-2026-79226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...
CVE-2026-79137
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...