Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-87566

  • EPSS 0.22%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 09.09.2026 19:18:03

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87591

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 11.09.2026 14:14:17

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

6.5

CVE-2026-87623

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 09.09.2026 17:28:10

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87638

  • EPSS 0.32%
  • Veröffentlicht 09.09.2026 00:09:58
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87470

  • EPSS 0.4%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:20

Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87529

  • EPSS 0.46%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:24

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-87531

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 09.09.2026 19:15:20

Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87584

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 11.09.2026 15:04:14

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87586

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 13:47:20

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87632

  • EPSS 0.23%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 09.09.2026 20:21:22

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)