Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)

Chromium CVE-2026-93385: Information leak in Paint

Chromium CVE-2026-93383: Information leak in Permissions

Chromium CVE-2026-93387: Improper state validation in Skia

Chromium CVE-2026-91725: Observable discrepancy

Chromium CVE-2026-91714: Observable discrepancy

Chromium CVE-2026-91717: Missing authorization

Chromium CVE-2026-91744: Race condition

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Chromium CVE-2026-87593: Information leak in Editing

Chromium CVE-2026-87477: Information leak in Core

Chromium CVE-2026-87551: Improper certificate validation in CORS

Chromium CVE-2026-87571: Improper certificate validation in Loader

Chromium CVE-2026-87602: Out of bounds read in ANGLE

Chromium CVE-2026-87461: Information leak in Core

Chromium CVE-2026-87490: Information leak in Transactions Platform

Chromium CVE-2026-87605: Missing authorization in Contacts

Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing

Chromium CVE-2026-87565: Information leak in Passwords

Chromium CVE-2026-87538: Clickjacking in Input

Chromium CVE-2026-87459: Observable discrepancy in Select

Chromium CVE-2026-87522: Missing authorization in WebView

Chromium CVE-2026-87543: Missing authorization in Core

Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing

Chromium CVE-2026-87619: Observable discrepancy in Prefetch

Chromium CVE-2026-87586: Out of bounds read in ANGLE

Chromium CVE-2026-87435: Information leak in ControlledFrame

Chromium CVE-2026-87468: Incorrect authorization in Isolated

Chromium CVE-2026-87641: Race condition in Browser

Chromium CVE-2026-87540: Incorrect authorization in Isolated