Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-87561

  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:10:00
  • Zuletzt bearbeitet 10.09.2026 20:17:30

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)

4.3

CVE-2026-87598

  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:10:00
  • Zuletzt bearbeitet 09.09.2026 20:22:38

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

3.1

CVE-2026-87614

  • EPSS 0.19%
  • Veröffentlicht 09.09.2026 00:10:00
  • Zuletzt bearbeitet 09.09.2026 20:22:09

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

8.3

CVE-2026-87618

  • EPSS 0.32%
  • Veröffentlicht 09.09.2026 00:10:00
  • Zuletzt bearbeitet 10.09.2026 04:18:29

Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...

4.3

CVE-2026-87619

  • EPSS 0.19%
  • Veröffentlicht 09.09.2026 00:10:00
  • Zuletzt bearbeitet 09.09.2026 20:21:56

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

9.6

CVE-2026-87526

  • EPSS 0.36%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 10.09.2026 04:18:23

Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)

9.6

CVE-2026-87609

  • EPSS 0.39%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 10.09.2026 04:18:28

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

6.5

CVE-2026-87610

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 11.09.2026 13:57:46

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87626

  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 11.09.2026 13:57:39

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

6.5

CVE-2026-87629

Exploit
  • EPSS 0.25%
  • Veröffentlicht 09.09.2026 00:09:59
  • Zuletzt bearbeitet 09.09.2026 17:29:22

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)