CVE-2026-87620

CVE-2026-87620 is a low-severity information disclosure vulnerability in the SVG rendering component of Google Chrome prior to version 153.0.8010.36 . An observable discrepancy in SVG handling allowed a remote attacker to obtain sensitive information by convincing a user to visit a crafted HTML p...

CVE-2026-87656

CVE-2026-87656 is an improper state validation flaw in Safebrowsing in Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit the vulnerability by delivering a crafted HTML page to a user, allowing them to bypass system access restrictions . The Chromium security team clas...

CVE-2026-87543

CVE-2026-87543 is a missing authorization vulnerability in the Core component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , potentially gaining access to other site...

CVE-2026-87568

CVE-2026-87568 is an improper input validation flaw in the Chromium engine of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could spoof UI elements by sending crafted network traffic. Chromium rates the severity as Low , consistent with ...

CVE-2026-87619

CVE-2026-87619 affects Google Chrome prior to 153.0.8010.36 , where an observable discrepancy in the Prefetch mechanism allowed a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is rated Low severity by Chromium. Remediation is to update to Chrome 153.0.8010.3...

CVE-2026-87566

CVE-2026-87566 is an observable discrepancy in the Layout component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the user's browser. Chromium classifies the severity as Medium . The fix was...

CVE-2026-87431

CVE-2026-87431 is a missing authorization vulnerability in the Extensions component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain sensitive information by delivering a crafted Chrome extension to the victim. Chromium assigns a Medium security severi...

CVE-2026-87541

CVE-2026-87541 is an information leak in the Navigation component of Google Chrome , affecting versions prior to 153.0.8010.36 . The flaw allows a remote attacker who has already compromised the renderer process to bypass site isolation by delivering a crafted HTML page. Chromium rates the severi...

CVE-2026-87462

A UI misrepresentation vulnerability in the FedCM (Federated Credentials Management) component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering , to spoof UI elements via a crafted HTML page. The Chromium project assigned this a Medium secur...

CVE-2026-87573

CVE-2026-87573 is an improper input validation vulnerability in the Network component of Google Chrome prior to version 153.0.8010.36 . It allows a remote attacker to bypass the web origin policy by serving a crafted HTML page, rated Medium severity by the Chromium team. The fix is available in C...

CVE-2026-87479

CVE-2026-87479 affects the Extensions component of Google Chrome prior to version 153.0.8010.36 , caused by an insufficient policy enforcement . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the...

CVE-2026-87651

CVE-2026-87651 is an incorrect authorization vulnerability in the Paint component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can obtain cross-origin data by delivering a crafted HTML page to a victim. Chromium rates the security severity as High . The fix was shipped in t...

CVE-2026-87438

CVE-2026-87438 is an out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this by delivering a crafted HTML page, leading to arbitrary code execution outside the browser sandbox . The Chrom...

CVE-2026-87488

CVE-2026-87488 is a use-after-free vulnerability in the WebGL component of Google Chrome on Android versions prior to 153.0.8010.36 . A remote attacker can execute arbitrary code outside the sandbox by delivering a crafted HTML page to a victim, with Chromium classifying the severity as Critical ...

cve-2025-50428

CVE-2025-50428 - RaspAP Command Injection A proof-of-concept exploit for CVE-2025-50428, a command injection vulnerability in RaspAP raspap-webgui 3.2.9 and earlier...

cpanel-cve-2026-41940

🔒 cPanel CVE-2026-41940 — Complete Security Toolkit Complete Security Toolkit for cPanel servers infected with CVE-2026-41940 / nuclear.x86. Two scripts — one full audit and one auto cleanup with Imunify360. Works on both original license and bypass/shared license servers. 👨‍💻 Author | ---|---...

PT-2026-88694

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88559

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-88632

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88693

Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...