Search: 20.chromium

An out of bounds read vulnerability exists in the DataTransfer component of Google Chrome versions prior to 153.0.8010.52. This flaw allows a local attacker, using social engineering, to read memory outside the sandbox via a local program. The vulnerability has been assigned a medium severity by Chromium security. No CVSS score is available, and no explicit patch information is provided in the input data.

A UI misrepresentation vulnerability exists in the WebAppInstalls component of Google Chrome versions prior to 153.0.8010.52. This flaw allows a remote attacker to use social engineering techniques to spoof UI elements by crafting a malicious HTML page. The vulnerability has been assigned CVE-2026-93386 and is rated with low severity by the Chromium security team.

An information leak vulnerability exists in the Permissions component of Google Chrome versions prior to 153.0.8010.52. This flaw allows a remote attacker to leak cross-origin data by crafting a malicious HTML page. The vulnerability has been assigned CVE-2026-93383 and is rated with medium severity by the Chromium security team.

A missing authorization vulnerability in the Storage component of Google Chrome versions prior to 153.0.8010.52 allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. This vulnerability is classified with medium severity by Chromium security.

A race condition vulnerability exists in the FileSystem component of Google Chrome versions prior to 153.0.8010.52. This flaw allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass system access restrictions via a crafted HTML page. The Chromium project has assigned this issue a medium severity rating. No CVSS score is provided, and no explicit patch or remediation information is included in the available data.

A use-after-free vulnerability exists in the Dawn component of Google Chrome on Android versions prior to 153.0.8010.52. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is classified as critical by Chromium security.

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)