Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-87574

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 09.09.2026 19:13:17

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87445

Exploit
  • EPSS 0.29%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:19:03

UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87462

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 09.09.2026 20:30:29

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2026-87472

  • EPSS 0.29%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:16:51

Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4

CVE-2026-87486

Exploit
  • EPSS 0.12%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:15:19

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)

5.4

CVE-2026-87649

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 16:18:06

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87655

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 09.09.2026 20:27:04

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-87452

  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 09.09.2026 17:49:48

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87501

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 19:22:21

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87507

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 19:22:36

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)