CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

CVE-2026-87445

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to user interface UI elements being spoofed, potentially misleading users and allowing for information disclosure...

CVE-2026-87642

A flaw was found in WebGL within Chromium. An uninitialized resource vulnerability allows a remote attacker to leak sensitive cross-origin data. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-87574

An information leak flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517092658...

CVE-2026-87580

A flaw was found in Google Chrome. An incorrect authorization vulnerability in WebAppInstalls could allow a remote attacker to bypass site isolation. This exploitation requires the attacker to first compromise the renderer process and then leverage social engineering through a crafted HTML page...

CVE-2026-87503

A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...

CVE-2026-87540

A flaw was found in Google Chrome. Incorrect authorization in the Isolated component allowed a remote attacker to spoof user interface UI elements. This could be achieved by enticing a user to visit a specially crafted HTML page, leading to a deceptive user experience...

CVE-2026-87568

A flaw was found in Chromium. This improper input validation vulnerability allows a remote attacker, who has compromised the renderer process, to spoof user interface UI elements. This can be achieved by sending crafted network traffic, potentially deceiving users or leading to further attacks...

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-87619

An observable discrepancy flaw was found in the Prefetch component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497433347...

CVE-2026-87484

A flaw was found in Google Chrome. This vulnerability, located in the Geometry component, allows a remote attacker to spoof user interface UI elements. By leveraging social engineering and enticing a user to visit a specially crafted HTML page, an attacker could deceive the user. This deception...

CVE-2026-87599

A flaw was found in Google Chrome. Improper input validation within the Interstitials component allows a remote attacker to spoof user interface UI elements. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to deceptive visual information being...

CVE-2026-87565

A flaw was found in Google Chrome on Android. A remote attacker could exploit an information leak in the Passwords component by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87576

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could allow the attacker to read memory outside of the sandbox,...

CVE-2026-87497

An uninitialized resource flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504670493...

CVE-2026-87640

A flaw was found in WebView in Google Chrome on Android. A remote attacker who has compromised the renderer process could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to the disclosure of memory outside of the sandbox, potentially exposing sensiti...

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

CVE-2026-87566

An observable discrepancy flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540021850...

CVE-2026-87657

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542146471...

CVE-2026-87649

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit a user interface UI misrepresentation in the Downloads section by tricking a user into interacting with a specially crafted HTML page. This could allow the attacker to bypass system acces...

CVE-2026-87567

A flaw was found in Google Chrome. This user interface UI misrepresentation in URL formatting allows a remote attacker to leverage social engineering techniques. By using a specially crafted domain name, the attacker can spoof the address bar, potentially deceiving users about the authenticity of...

CVE-2026-87595

A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...

CVE-2026-87655

A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...

CVE-2026-87515

A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...

CVE-2026-87472

A flaw was found in chromium-browser. Improper input validation in the Federated Credential Management FedCM component of Google Chrome allows a remote attacker, who has already compromised the renderer process, to spoof user interface UI elements. This can be achieved by providing a specially...

CVE-2026-87559

A flaw was found in Chromium. A remote attacker, by leveraging social engineering tactics and providing a specially crafted HTML page, could spoof user interface UI elements. This misrepresentation of the UI could deceive users...

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

CVE-2026-87495

A flaw was found in chromium-browser. A remote attacker, who has compromised the renderer process, could exploit a vulnerability in the Scroll component by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data...

CVE-2026-87450

A flaw was found in Google Chrome. This incorrect authorization vulnerability in Permissions allows a remote attacker, by leveraging social engineering and a crafted Chrome extension, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...

CVE-2026-87616

An improper initialization flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520469117...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87514

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...

CVE-2026-87491

A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-87468

An incorrect authorization flaw was found in the Isolated component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532931962...

CVE-2026-87606

A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...

CVE-2026-87603

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this missing authorization vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorize...

CVE-2026-87590

A flaw was found in chromium-browser. Improper input validation in the Passwords component of Google Chrome allows a remote attacker to potentially leak sensitive information by sending crafted network traffic...

CVE-2026-87563

A flaw was found in Paint in Google Chrome. An origin validation error allows a remote attacker to obtain sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. This vulnerability could lead to information disclosure...

CVE-2026-87466

A flaw was found in Chromium. Incorrect authorization within the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actio...

CVE-2026-87435

A flaw was found in Google Chrome's ControlledFrame. A remote attacker, who has compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...

CVE-2026-87639

A flaw was found in WebPackaging in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87636

A type confusion flaw was found in the XML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495541478...

CVE-2026-87625

A flaw was found in Chromium V8. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code within the sandbox environment. The exploitation occurs when a user is tricked into installing a specially crafted Chrome extension...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87547

A flaw was found in Google Chrome's FileSystem component. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to leverage social engineering tactics. By enticing a user to visit a specially crafted HTML page, the attacker could potentially execute arbitrary...

CVE-2026-87612

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554236352...

CVE-2026-87579

A flaw was found in WebRTC within Google Chrome. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment...