Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Chromium CVE-2026-87544: Incorrect authorization in Extensions
Chromium CVE-2026-87593: Information leak in Editing
Chromium CVE-2026-87437: Information leak in Frames
Chromium CVE-2026-87477: Information leak in Core
Chromium CVE-2026-87551: Improper certificate validation in CORS
Chromium CVE-2026-87571: Improper certificate validation in Loader
Chromium CVE-2026-87601: Race condition in V8
Chromium CVE-2026-87608: Improper certificate validation in FedCM
Chromium CVE-2026-87602: Out of bounds read in ANGLE
Chromium CVE-2026-87473: Incorrect authorization in FileHandling
Chromium CVE-2026-87469: Improper input validation in Extensions
Chromium CVE-2026-87461: Information leak in Core
Chromium CVE-2026-87489: Memory corruption in V8
Chromium CVE-2026-87575: Incorrect authorization in Loader
Chromium CVE-2026-87631: Missing authorization in DOM
Chromium CVE-2026-87490: Information leak in Transactions Platform
Chromium CVE-2026-87509: Incorrect authorization in Updater
Chromium CVE-2026-87605: Missing authorization in Contacts
Chromium CVE-2026-87624: UI misrepresentation in Passwords
Chromium CVE-2026-87583: UI misrepresentation in Passwords
Chromium CVE-2026-87463: Incorrect authorization in Certificate
Chromium CVE-2026-87523: Race condition in DataTransfer
Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing
Chromium CVE-2026-87565: Information leak in Passwords
Chromium CVE-2026-87538: Clickjacking in Input