CVE-2026-87595
- EPSS 0.18%
- Veröffentlicht 09.09.2026 00:10:02
- Zuletzt bearbeitet 14.09.2026 21:43:53
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87620
- EPSS 0.24%
- Veröffentlicht 09.09.2026 00:10:02
- Zuletzt bearbeitet 09.09.2026 17:29:51
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87511
- EPSS 0.22%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 15.09.2026 17:22:16
Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-87522
- EPSS 0.29%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 11.09.2026 19:23:07
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: ...
CVE-2026-87543
- EPSS 0.18%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 10.09.2026 20:17:30
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87568
- EPSS 0.16%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 09.09.2026 20:20:58
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-87627
- EPSS 0.17%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 14.09.2026 21:43:11
Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)
CVE-2026-87656
- EPSS 0.26%
- Veröffentlicht 09.09.2026 00:10:01
- Zuletzt bearbeitet 14.09.2026 13:18:59
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87429
- EPSS 0.29%
- Veröffentlicht 09.09.2026 00:10:00
- Zuletzt bearbeitet 10.09.2026 20:17:29
Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87519
- EPSS 0.25%
- Veröffentlicht 09.09.2026 00:10:00
- Zuletzt bearbeitet 11.09.2026 19:24:09
Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)