Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities
Chromium CVE-2026-87522: Missing authorization in WebView
Chromium CVE-2026-87503: Inappropriate implementation in Downloads
Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades
Chromium CVE-2026-93387: Improper state validation in Skia
Chromium CVE-2026-93385: Information leak in Paint
Chromium CVE-2026-93383: Information leak in Permissions
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
Chromium CVE-2026-91744: Race condition
Chromium CVE-2026-91725: Observable discrepancy
Chromium CVE-2026-91717: Missing authorization
Chromium CVE-2026-91714: Observable discrepancy
Chromium: CVE-2026-79264 Incorrect reference resolution in Preload
Chromium: CVE-2026-79259 Improper input validation in Safebrowsing
Chromium: CVE-2026-79251 Improper input validation in Network
Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker
Chromium: CVE-2026-79205 Incorrect authorization in Network
Chromium: CVE-2026-79151 Improper input validation in Safebrowsing
Chromium: CVE-2026-79087 Injection in Chrome Tabs
Chromium: CVE-2026-79050 Incorrect authorization in Network
Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords
Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades
Chromium: CVE-2026-78979 Race condition in Core
Chromium: CVE-2026-78942 Incorrect reference resolution in Loader
Chromium: CVE-2026-84357 Improper input validation in Omnibox
Chromium: CVE-2026-84356 UI misrepresentation in FullScreen
Chromium: CVE-2026-79270 Uninitialized resource in ANGLE