CVE-2026-87636
- EPSS 0.31%
- Veröffentlicht 09.09.2026 00:09:39
- Zuletzt bearbeitet 10.09.2026 04:18:30
Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87446
- EPSS 0.28%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 10.09.2026 19:18:15
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87478
- EPSS 0.35%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 09.09.2026 17:14:57
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87491
- EPSS 0.76%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 21.09.2026 13:17:11
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87504
- EPSS 0.39%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 10.09.2026 04:18:22
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87640
- EPSS 0.23%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 10.09.2026 16:18:06
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87657
- EPSS 0.17%
- Veröffentlicht 09.09.2026 00:09:38
- Zuletzt bearbeitet 09.09.2026 20:26:52
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87474
- EPSS 0.49%
- Veröffentlicht 09.09.2026 00:09:37
- Zuletzt bearbeitet 10.09.2026 04:18:20
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87480
- EPSS 0.35%
- Veröffentlicht 09.09.2026 00:09:37
- Zuletzt bearbeitet 10.09.2026 04:18:20
Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High...
CVE-2026-87536
- EPSS 0.27%
- Veröffentlicht 09.09.2026 00:09:37
- Zuletzt bearbeitet 10.09.2026 18:41:00
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)