CVE-2026-87541
- EPSS 0.19%
- Veröffentlicht 09.09.2026 00:09:52
- Zuletzt bearbeitet 10.09.2026 18:46:32
Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87555
- EPSS 0.31%
- Veröffentlicht 09.09.2026 00:09:52
- Zuletzt bearbeitet 09.09.2026 20:24:45
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87570
- EPSS 0.23%
- Veröffentlicht 09.09.2026 00:09:52
- Zuletzt bearbeitet 10.09.2026 16:18:06
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security sever...
CVE-2026-87600
- EPSS 0.22%
- Veröffentlicht 09.09.2026 00:09:52
- Zuletzt bearbeitet 11.09.2026 13:57:19
Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87441
- EPSS 0.27%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 10.09.2026 19:19:46
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87458
- EPSS 0.24%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 09.09.2026 20:30:48
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87495
- EPSS 0.2%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 09.09.2026 19:16:51
Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87496
- EPSS 0.21%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 10.09.2026 19:20:47
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87549
- EPSS 0.28%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 10.09.2026 16:18:05
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87567
- EPSS 0.16%
- Veröffentlicht 09.09.2026 00:09:51
- Zuletzt bearbeitet 09.09.2026 20:20:58
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)