Threats tagged 'ghsa-cpqr-c57w-r93w'

CVE-2026-87582 is a high severity confused deputy vulnerability in Google Chrome's DataTransfer component prior to version 153.0.8010.36. It allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability affects Chrome versions before 153.0.8010.36. A fix is available as indicated by the vendor advisory.