CVE-2026-87649

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...

CVE-2026-87567

A flaw was found in Google Chrome. This user interface UI misrepresentation in URL formatting allows a remote attacker to leverage social engineering techniques. By using a specially crafted domain name, the attacker can spoof the address bar, potentially deceiving users about the authenticity of...

CVE-2026-87595

A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...

CVE-2026-87515

A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...

CVE-2026-87559

A flaw was found in Chromium. A remote attacker, by leveraging social engineering tactics and providing a specially crafted HTML page, could spoof user interface UI elements. This misrepresentation of the UI could deceive users...

CVE-2026-87547

A flaw was found in Google Chrome's FileSystem component. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to leverage social engineering tactics. By enticing a user to visit a specially crafted HTML page, the attacker could potentially execute arbitrary...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

CVE-2026-87658

A flaw was found in Google Chrome's Extensions component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques and a specially crafted Chrome extension. This could lead to an information leak, allowing the attacker to obtain sensitive data from other...

CVE-2026-87513

A flaw was found in ControlledFrame in Chromium. A remote attacker could leverage social engineering techniques to exploit a missing authorization vulnerability. By tricking a user into interacting with a specially crafted HTML page, the attacker could bypass system access restrictions...

CVE-2026-87570

A flaw was found in SiteIsolation in Google Chrome. A remote attacker, who has already compromised the renderer process, could leverage social engineering and a crafted file to bypass the browser's site isolation feature. This bypass could allow the attacker to access information or resources fro...

CVE-2026-87462

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering, could exploit a user interface UI misrepresentation in the Federated Credential Management FedCM component. This vulnerability allows the attacker to spoof UI elements through a specially crafted HTML page,...

CVE-2026-87629

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...

CVE-2026-87600

A flaw was found in Google Chrome's Safebrowsing feature. This improper input validation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by enticing a user to open a specially crafted HTML page. This could lead to unauthorized access to...

CVE-2026-87496

A flaw was found in Google Chrome. A remote attacker, through social engineering, could present a specially crafted HTML page to spoof user interface UI elements. This UI misrepresentation could deceive users, potentially leading to information disclosure or unintended actions...

CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...