Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.1

CVE-2026-87531

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 09.09.2026 19:15:20

Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87584

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 11.09.2026 15:04:14

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87586

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 13:47:20

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87632

  • EPSS 0.23%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 09.09.2026 20:21:22

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-87637

  • EPSS 0.32%
  • Veröffentlicht 09.09.2026 00:09:57
  • Zuletzt bearbeitet 10.09.2026 04:18:30

Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

7.5

CVE-2026-87431

  • EPSS 0.26%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 10.09.2026 20:17:29

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

5.3

CVE-2026-87435

  • EPSS 0.31%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 09.09.2026 16:36:06

Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87468

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 11.09.2026 19:24:45

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87493

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 11.09.2026 19:24:15

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

8.3

CVE-2026-87510

  • EPSS 0.37%
  • Veröffentlicht 09.09.2026 00:09:56
  • Zuletzt bearbeitet 10.09.2026 04:18:22

Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security seve...