CVE-2026-87476

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87450

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87605

CVE-2026-87605 is a missing authorization vulnerability in the Contacts component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and serving a crafted HTML page, potentially obtain sensit...

CVE-2026-87431

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87435

CVE-2026-87435 is an information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by serving a crafted HTML page. The Chromium security severity is Medium , with a CVSS 3.1 score...

EUVD-2026-74406

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87594

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87594

CVE-2026-87594 is an incorrect authorization flaw in the DataTransfer component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by delivering a crafted HTML page. The vulnerability is rated Medium seve...

CVE-2026-87450

Incorrect authorization in the Permissions component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering , to obtain sensitive information via a crafted Chrome extension. The vulnerability is rated Medium by Chromium and 7.5 (HIGH) by NVD (CVSS 3.1: AV...

EUVD-2026-74387

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87450

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-74391

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74344

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

EUVD-2026-74514

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

Security Advisory 0178

Security Advisory 0178 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73440 CVSSv3.1 Base Score: 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVSSv4.0 Base Score: 2.3...

Linux Distros Unpatched Vulnerability : CVE-2026-87552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via...

CVE-2023-5359

CVE-2023-5359 - Vulnerabilidad de almacenamiento en texto claro en W3 Total Cache Descripción CVE-2023-5359 es una vulnerabilidad de almacenamiento en texto claro que afecta al plugin de WordPress W3 Total Cache en versiones ≤ 2.7.5. Esta vulnerabilidad permite a atacantes remotos acceder a...

CVE-2026-76202

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-77108

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...