Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2026-87637

  • EPSS 0.32%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

7.5

CVE-2026-87431

  • EPSS 0.26%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 10.09.2026 20:17:29

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

5.3

CVE-2026-87435

  • EPSS 0.31%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 09.09.2026 16:36:06

Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87468

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 11.09.2026 19:24:45

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87493

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 11.09.2026 19:24:15

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

8.3

CVE-2026-87510

  • EPSS 0.37%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 10.09.2026 04:18:22

Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security seve...

4.3

CVE-2026-87563

  • EPSS 0.16%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 09.09.2026 19:18:37

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-87625

  • EPSS 0.27%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 10.09.2026 04:18:29

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

8.1

CVE-2026-87533

Exploit
  • EPSS 0.09%
  • Veröffentlicht 09.09.2026 00:09:55
  • Zuletzt bearbeitet 10.09.2026 18:34:50

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

6.5

CVE-2026-87535

Exploit
  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:55
  • Zuletzt bearbeitet 10.09.2026 18:39:37

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)