CVE-2026-87599

CVE-2026-87599 is an improper input validation flaw in the Interstitials component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to spoof UI elements , rated Medium severity by Chromium (CVSS 3.1: 5.4, network vector, user ...

CVE-2026-87552

CVE-2026-87552 is a missing authorization vulnerability in TrustedWebActivities within Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A local attacker with a co-installed app can exploit this to obtain sensitive information. Chromium rates the severity as High ; the NVD-as...

CVE-2026-87580

Incorrect authorization in the WebAppInstalls component of Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, leveraging social engineering. The vulnerability carries a CVSS 3.1 score of...

CVE-2026-87603

CVE-2026-87603 is a missing authorization flaw in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker can exploit it by tricking a user into visiting a crafted HTML page , potentially bypassing system access restrictions . The CVSS 3.1 score is 6.5 (Medium) , with...

CVE-2026-87615

CVE-2026-87615 is a race condition in the Payments component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can spoof UI elements via a crafted HTML page, achieving low impact on confidentiality and availability with no integrity imp...

CVE-2026-87617

A use-after-free vulnerability in DevTools within Google Chrome prior to 153.0.8010.36 allows a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium assigns a Low security severity, while the CNA-assigned CVSS 3.1 score is 8....

CVE-2026-87434

CVE-2026-87434 is a missing-authorization vulnerability in CORS handling in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could bypass the web origin policy using a crafted HTML page, leading to low confidentiality impact. The CVSS 3.1 s...

CVE-2026-87541

CVE-2026-87541 is an information leak in the Navigation component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , escalating from a partial renderer compromise to broader acc...

CVE-2026-87441

CVE-2026-87441 is a missing authorization vulnerability in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker can leverage a crafted Chrome extension to bypass system access restrictions, resulting in a high integrity impact without confidentiality or availability...

CVE-2026-87442

CVE-2026-87442 is a confused deputy vulnerability in the Prerender component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially bypass the web origin policy via a crafted HTML page, allowing cross-origin access to resourc...