Google

Chrome

3393 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-87655

  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:50
  • Zuletzt bearbeitet 09.09.2026 20:27:04

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-87452

  • EPSS 0.21%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 09.09.2026 17:49:48

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87501

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 19:22:21

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87507

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 19:22:36

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87516

  • EPSS 0.24%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 09.09.2026 19:15:55

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87548

  • EPSS 0.31%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 16:18:05

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2026-87559

  • EPSS 0.2%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 09.09.2026 20:22:45

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-87599

Exploit
  • EPSS 0.18%
  • Veröffentlicht 09.09.2026 00:09:49
  • Zuletzt bearbeitet 10.09.2026 13:44:29

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-87508

  • EPSS 0.25%
  • Veröffentlicht 09.09.2026 00:09:48
  • Zuletzt bearbeitet 09.09.2026 19:16:14

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

9.8

CVE-2026-87534

  • EPSS 0.17%
  • Veröffentlicht 09.09.2026 00:09:48
  • Zuletzt bearbeitet 10.09.2026 19:17:38

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)