Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87449 | medium | 4.3 | No | Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web... | 2026-09-09 |
| CVE-2026-87432 | medium | 4.2 | No | Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro... | 2026-09-09 |
| CVE-2026-87653 | medium | 5.4 | No | UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via... | 2026-09-09 |
| CVE-2026-87647 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to... | 2026-09-09 |
| CVE-2026-87576 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the render... | 2026-09-09 |
| CVE-2026-87635 | medium | 5.4 | No | UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML p... | 2026-09-09 |
| CVE-2026-87655 | medium | 5.4 | No | Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elemen... | 2026-09-09 |
| CVE-2026-87657 | low | 3.1 | No | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memo... | 2026-09-09 |
| CVE-2026-87550 | medium | 4.3 | No | Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web o... | 2026-09-09 |
| CVE-2026-87545 | medium | 6.5 | No | Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak... | 2026-09-09 |
| CVE-2026-87555 | medium | 4.7 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the san... | 2026-09-09 |
| CVE-2026-87559 | medium | 4.2 | No | UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI eleme... | 2026-09-09 |
| CVE-2026-87598 | medium | 4.3 | No | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a... | 2026-09-09 |
| CVE-2026-87602 | medium | 4.7 | No | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outsi... | 2026-09-09 |
| CVE-2026-87614 | low | 3.1 | No | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer... | 2026-09-09 |
| CVE-2026-87619 | medium | 4.3 | No | Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted... | 2026-09-09 |
| CVE-2026-87622 | medium | 4.3 | No | Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted H... | 2026-09-09 |
| CVE-2026-87632 | medium | 4.3 | No | Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a cra... | 2026-09-09 |
| CVE-2026-87562 | medium | 4.3 | No | Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially s... | 2026-09-09 |
| CVE-2026-87568 | medium | 4.3 | No | Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro... | 2026-09-09 |