Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-87495

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 09.09.2026 19:16:51

Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87496

Exploit
  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 10.09.2026 19:20:47

UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-87549

  • EPSS 0.28%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 10.09.2026 16:18:05

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87567

  • EPSS 0.16%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 09.09.2026 20:20:58

UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)

4.3

CVE-2026-87574

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:51
  • Zuletzt bearbeitet 09.09.2026 19:13:17

Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87445

Exploit
  • EPSS 0.29%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:19:03

UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87462

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 09.09.2026 20:30:29

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2026-87472

  • EPSS 0.29%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:16:51

Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4

CVE-2026-87486

Exploit
  • EPSS 0.12%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 19:15:19

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)

5.4

CVE-2026-87649

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 10.09.2026 16:18:06

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)