Where
-Infinity
0
Severity
6.5
EPSS
0.31%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

First published (updated )
Severity
4.3
EPSS
0.25%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

First published (updated )
Severity
4.3
EPSS
0.25%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

First published (updated )
Severity
8.1
EPSS
0.10%
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

First published (updated )
Severity
8.8
EPSS
0.24%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-91722: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
5.3
EPSS
0.21%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-91725: Observable discrepancy

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.25%
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91738: Improper input validation

1 / 3
Source: Microsoft
First published (updated )
Severity
5.3
EPSS
0.21%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-91714: Observable discrepancy

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
EPSS
0.25%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

First published (updated )
Severity
9.6
EPSS
0.25%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91729: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
EPSS
0.25%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-91737: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.24%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91718: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.24%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91716: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
5.1
EPSS
0.08%
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium CVE-2026-91717: Missing authorization

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
EPSS
0.29%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91733: Improper state validation

1 / 3
Source: Microsoft
First published (updated )
Severity
5.3
EPSS
0.23%
Race Condition
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-91744: Race condition

1 / 3
Source: Microsoft
First published (updated )
Severity
7.4
EPSS
0.09%
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium CVE-2026-91734: Incorrect authorization

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
EPSS
0.34%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-91721: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.33%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-91749: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

1 / 3
Source: NVD
First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium CVE-2026-87544: Incorrect authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
Severity
6.5
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-87593: Information leak in Editing

1 / 3
Source: Microsoft
First published (updated )
Severity
6.5
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-87477: Information leak in Core

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium CVE-2026-87551: Improper certificate validation in CORS

1 / 3
Source: Microsoft
First published (updated )
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Chromium CVE-2026-87571: Improper certificate validation in Loader

1 / 3
Source: Microsoft
First published (updated )
Severity
4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Chromium CVE-2026-87602: Out of bounds read in ANGLE

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-87461: Information leak in Core

1 / 3
Source: Microsoft
First published (updated )
Severity
6.5
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-87490: Information leak in Transactions Platform

1 / 3
Source: Microsoft
First published (updated )
Severity
5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-87605: Missing authorization in Contacts

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
Incorrect Type Cast
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203