Threat Intelligence Database

A vulnerability in Google Chrome's WebGL implementation prior to version 153.0.8010.36 allows a remote attacker to leak cross-origin data by exploiting an uninitialized resource. This issue could be triggered via a crafted HTML page. The Chromium project has assigned a medium severity level to this security flaw.

An incorrect authorization vulnerability exists in the ServiceWorker component of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by using a crafted HTML page. The Chromium security team has rated the severity of this issue as low.

An incorrect authorization vulnerability in the Isolated feature of Google Chrome prior to version 153.0.8010.36 allows a remote attacker to bypass the web origin policy and access a privileged page via a crafted HTML page. This vulnerability has been assigned CVE-2026-87577 and is rated with medium severity by Chromium security. No patch information is currently available.

An information leak vulnerability exists in the Cross-Origin Resource Sharing (CORS) implementation in Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a crafted HTML page. The vulnerability is rated with medium severity by Chromium security. No specific affected versions or patch information is provided in the input data.

A missing authorization vulnerability in DevTools of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data via a crafted Chrome extension. The issue is classified with low severity by Chromium security. No CVSS score or known exploits in the wild are reported. No patch links are provided in the data, and the vendor advisory status is not confirmed.

An observable discrepancy in navigation behavior in Google Chrome versions prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data by using a crafted HTML page. This vulnerability is classified with medium severity by Chromium security. No CVSS score or detailed exploit information is available. There is no explicit patch information provided in the source data.

An incomplete cleanup vulnerability in Google Chrome extensions prior to version 153.0.8010.36 allows a remote attacker to bypass system access restrictions via a crafted extension leveraging social engineering. The issue has a medium severity rating and does not impact confidentiality or availability but can impact integrity.

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)