Page 5 of 100 — Google CVEs from a corpus of 17082, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-87561 | Medium | 4.3 | 2026-09-09 | Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrom… |
CVE-2026-87560 | Medium | 4.3 | 2026-09-09 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page… |
CVE-2026-87559 | Medium | 4.2 | 2026-09-09 | UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H… |
CVE-2026-87558 | Critical | 9.6 | 2026-09-09 | Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf… |
CVE-2026-87557 | Medium | 4.3 | 2026-09-09 | Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2026-87556 | Medium | 4.3 | 2026-09-09 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page… |
CVE-2026-87555 | Medium | 4.7 | 2026-09-09 | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted… |
CVE-2026-87554 | High | 8.1 | 2026-09-09 | Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a… |
CVE-2026-87553 | High | 8.3 | 2026-09-09 | Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potent… |
CVE-2026-87552 | Medium | 5.5 | 2026-09-09 | Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information vi… |
CVE-2026-87551 | Medium | 4.3 | 2026-09-09 | Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin po… |
CVE-2026-87550 | Medium | 4.3 | 2026-09-09 | Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a… |
CVE-2026-87549 | Medium | 6.5 | 2026-09-09 | Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restric… |
CVE-2026-87548 | Medium | 4.3 | 2026-09-09 | Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTM… |
CVE-2026-87547 | Critical | 9.6 | 2026-09-09 | Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially exe… |
CVE-2026-87546 | Medium | 4.3 | 2026-09-09 | Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restricti… |
CVE-2026-87545 | Medium | 6.5 | 2026-09-09 | Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive informat… |
CVE-2026-87544 | Critical | 9.8 | 2026-09-09 | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged… |
CVE-2026-87543 | Medium | 4.3 | 2026-09-09 | Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolati… |
CVE-2026-87542 | High | 8.8 | 2026-09-09 | Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-87541 | Medium | 6.5 | 2026-09-09 | Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolat… |
CVE-2026-87540 | Medium | 5.4 | 2026-09-09 | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium s… |
CVE-2026-87539 | Low | 3.1 | 2026-09-09 | Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chrom… |
CVE-2026-87538 | Medium | 4.2 | 2026-09-09 | Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineeri… |
CVE-2026-87537 | High | 8.1 | 2026-09-09 | Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially e… |
CVE-2026-87536 | High | 8.8 | 2026-09-09 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-87535 | Medium | 6.5 | 2026-09-09 | Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions v… |
CVE-2026-87534 | Critical | 9.8 | 2026-09-09 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system… |
CVE-2026-87533 | High | 8.1 | 2026-09-09 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program… |
CVE-2026-87532 | Medium | 6.5 | 2026-09-09 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted… |
CVE-2026-87531 | Low | 3.1 | 2026-09-09 | Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data… |
CVE-2026-87530 | High | 8.1 | 2026-09-09 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code… |
CVE-2026-87529 | Critical | 9.6 | 2026-09-09 | Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v… |
CVE-2026-87528 | Critical | 9.6 | 2026-09-09 | Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbo… |
CVE-2026-87527 | Critical | 9.6 | 2026-09-09 | Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-87526 | Critical | 9.6 | 2026-09-09 | Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co… |
CVE-2026-87525 | Low | 2.7 | 2026-09-09 | Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local… |
CVE-2026-87524 | High | 8.3 | 2026-09-09 | Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-87523 | Medium | 5.3 | 2026-09-09 | Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information… |
CVE-2026-87522 | Medium | 6.5 | 2026-09-09 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially b… |
CVE-2026-87521 | Low | 3.1 | 2026-09-09 | Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin da… |
CVE-2026-87520 | Critical | 9.6 | 2026-09-09 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf… |
CVE-2026-87519 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access… |
CVE-2026-87518 | Medium | 5.3 | 2026-09-09 | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-87517 | Low | 3.1 | 2026-09-09 | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy… |
CVE-2026-87516 | Medium | 4.3 | 2026-09-09 | Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro… |
CVE-2026-87515 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access rest… |
CVE-2026-87514 | High | 8.1 | 2026-09-09 | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Ch… |
CVE-2026-87513 | Medium | 6.5 | 2026-09-09 | Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system acces… |
CVE-2026-87512 | Critical | 9.6 | 2026-09-09 | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra… |
CVE-2026-87511 | Medium | 4.3 | 2026-09-09 | Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension… |
CVE-2026-87510 | High | 8.3 | 2026-09-09 | Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-87509 | High | 8.1 | 2026-09-09 | Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox… |
CVE-2026-87508 | Medium | 4.3 | 2026-09-09 | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
CVE-2026-87507 | Medium | 5.4 | 2026-09-09 | UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a cr… |
CVE-2026-87506 | High | 8.3 | 2026-09-09 | Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute… |
CVE-2026-87505 | High | 8.1 | 2026-09-09 | Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site… |
CVE-2026-87504 | Critical | 9.6 | 2026-09-09 | Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sa… |
CVE-2026-87503 | Medium | 6.5 | 2026-09-09 | Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypa… |
CVE-2026-87502 | Medium | 4.2 | 2026-09-09 | Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social e… |
CVE-2026-87501 | Medium | 5.4 | 2026-09-09 | UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium sec… |
CVE-2026-87500 | Critical | 9.6 | 2026-09-09 | Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the… |
CVE-2026-87499 | High | 8.1 | 2026-09-09 | Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site is… |
CVE-2026-87498 | Low | 3.1 | 2026-09-09 | Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin… |
CVE-2026-87497 | Medium | 4.3 | 2026-09-09 | Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (… |
CVE-2026-87496 | Medium | 5.4 | 2026-09-09 | UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a craf… |
CVE-2026-87495 | Medium | 4.3 | 2026-09-09 | Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data… |
CVE-2026-87494 | Critical | 9.6 | 2026-09-09 | Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary co… |
CVE-2026-87493 | Medium | 6.5 | 2026-09-09 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access res… |
CVE-2026-87492 | Critical | 9.6 | 2026-09-09 | Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-87491 | High | 8.8 | 2026-09-09 | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-87490 | Medium | 6.5 | 2026-09-09 | Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML… |
CVE-2026-87489 | High | 8.8 | 2026-09-09 | Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-87488 | Critical | 9.6 | 2026-09-09 | Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra… |
CVE-2026-87487 | High | 8.3 | 2026-09-09 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged so… |
CVE-2026-87486 | Medium | 4.0 | 2026-09-09 | Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app… |
CVE-2026-87485 | Low | 3.1 | 2026-09-09 | Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin… |
CVE-2026-87484 | Medium | 5.4 | 2026-09-09 | UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a cra… |
CVE-2026-87483 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a c… |
CVE-2026-87482 | Medium | 5.9 | 2026-09-09 | Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive informa… |
CVE-2026-87481 | High | 8.3 | 2026-09-09 | Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-87480 | High | 8.3 | 2026-09-09 | Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute ar… |
CVE-2026-87479 | High | 8.3 | 2026-09-09 | Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and le… |
CVE-2026-87478 | Medium | 6.5 | 2026-09-09 | Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-87477 | Medium | 6.5 | 2026-09-09 | Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium sec… |
CVE-2026-87476 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C… |
CVE-2026-87475 | Medium | 6.5 | 2026-09-09 | Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restri… |
CVE-2026-87474 | Critical | 9.6 | 2026-09-09 | Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr… |
CVE-2026-87473 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access… |
CVE-2026-87472 | Medium | 4.2 | 2026-09-09 | Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI eleme… |
CVE-2026-87471 | High | 8.1 | 2026-09-09 | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass s… |
CVE-2026-87470 | Critical | 9.6 | 2026-09-09 | Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside… |
CVE-2026-87469 | Medium | 4.3 | 2026-09-09 | Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page vi… |
CVE-2026-87468 | Medium | 6.5 | 2026-09-09 | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromi… |
CVE-2026-87467 | High | 8.1 | 2026-09-09 | Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sand… |
CVE-2026-87466 | Medium | 4.3 | 2026-09-09 | Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |
CVE-2026-87465 | Medium | 4.2 | 2026-09-09 | Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI ele… |
CVE-2026-87464 | Critical | 9.6 | 2026-09-09 | Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-87463 | Medium | 4.8 | 2026-09-09 | Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via cra… |
CVE-2026-87462 | Medium | 5.4 | 2026-09-09 | UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafte… |