Where
AND
-Infinity
0
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Race Condition
AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

1 / 3
Source: NVD
First published (updated )
Severity
7.5
Race Condition
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87601: Race condition in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium CVE-2026-87608: Improper certificate validation in FedCM

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87489: Memory corruption in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium CVE-2026-87509: Incorrect authorization in Updater

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87617: Use after free in DevTools

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87618: Incorrect reference resolution in Storage

1 / 3
Source: Microsoft
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium CVE-2026-87431: Missing authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87510: Improper input validation in FileAPI

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87625: Use after free in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
Use After Free
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium CVE-2026-87533: Use after free in DevTools

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87616: Improper initialization in Views

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87644: Incorrect authorization in Views

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider

1 / 3
Source: Microsoft
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium CVE-2026-87450: Incorrect authorization in Permissions

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Chromium CVE-2026-87505: Incorrect authorization in FileSystem

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
Use After Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87648: Use after free in ANGLE

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

1 / 3
Source: NVD
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87582: Confused deputy in DataTransfer

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium CVE-2026-87537: Missing authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87433: Race condition in FileAPI

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
Race Condition
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium CVE-2026-87457: Race condition in Updater

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87506: Privilege elevation in WebUI

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-87553: Improper input validation in SiteIsolation

1 / 3
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203