CVE-2026-87607

CVE-2026-87607 is a use after free vulnerability in the Device component of Google Chrome on Mac , affecting versions prior to 153.0.8010.36 . A remote attacker could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page to a user. The vulnerability is rated CRI...

CVE-2026-87617

A use-after-free vulnerability in DevTools within Google Chrome prior to 153.0.8010.36 allows a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium assigns a Low security severity, while the CNA-assigned CVSS 3.1 score is 8....

CVE-2026-87618

CVE-2026-87618 affects Google Chrome on Windows prior to version 153.0.8010.36 . The vulnerability is an incorrect reference resolution in the Storage component, allowing a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox v...

CVE-2026-87658

CVE-2026-87658 is an information leak in the Extensions component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage social engineering to deliver a crafted Chrome extension, thereby obtaining cross-origin data that should have been isolated. The vulnerability is r...

CVE-2026-87434

CVE-2026-87434 is a missing-authorization vulnerability in CORS handling in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could bypass the web origin policy using a crafted HTML page, leading to low confidentiality impact. The CVSS 3.1 s...

CVE-2026-87465

CVE-2026-87465 is an incorrect authorization flaw in the Downloads component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to spoof UI elements . The CVSS 3.1 score is 4.2 (Medium...

CVE-2026-87478

An observable discrepancy in the Autofill component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page . The vulnerability carries a Medium Chromium security severity and a CVSS 3.1 score of 6.5 (AV:N/AC:L/PR...

CVE-2026-87485

CVE-2026-87485 affects Google Chrome prior to 153.0.8010.36 and stems from incorrect authorization in CORS (Cross-Origin Resource Sharing). A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to bypass the web origin policy , potentially accessing ...

CVE-2026-87509

CVE-2026-87509 is an incorrect authorization flaw in the Updater component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A local attacker can leverage this to execute arbitrary code outside the sandbox via a local program. Chromium rates the severity as Low , while the...

CVE-2026-87554

CVE-2026-87554 is a race condition in Chromoting (Chrome's remote desktop component) affecting Google Chrome on Windows prior to 153.0.8010.36 . A local attacker can exploit the flaw via a local program to execute arbitrary code outside the sandbox , rated High severity by Chromium and 8.1 (HIGH)...

CVE-2026-87647

CVE-2026-87647 is an uninitialized resource vulnerability in the GPU component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could read memory outside the sandbox by serving a crafted HTML page. Chromium assigned a security severity o...

CVE-2026-87456

CVE-2026-87456 is an uninitialized resource vulnerability in the Media component of Google Chrome prior to 153.0.8010.36 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to read memory outside the sandbox . The CVSS 3.1 score is 3....

CVE-2026-87517

A race condition in the Mobile component of Google Chrome on iOS prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to bypass the web origin policy via a crafted HTML page. The CNA-assigned CVSS 3.1 score is 3.1 (Low) , reflecting high attack complexity and r...