CVE-2026-87647 - Google Chrome GPU Uninitialized Memory Disclosure
CVE ID :CVE-2026-87647
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87647
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87648 - Google Chrome ANGLE Use-After-Free Vulnerability
CVE ID :CVE-2026-87648
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87648
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87649 - Google Chrome UI Spoofing Vulnerability
CVE ID :CVE-2026-87649
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87649
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87650 - Google Chrome WebGL Out-of-Bounds Read
CVE ID :CVE-2026-87650
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87650
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87651 - Google Chrome Paint Cross-Origin Data Disclosure Vulnerability
CVE ID :CVE-2026-87651
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87651
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87652 - Google Chrome PushAPI Authorization Bypass
CVE ID :CVE-2026-87652
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87652
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87653 - Google Chrome UI Spoofing Vulnerability
CVE ID :CVE-2026-87653
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87653
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87654 - Google Chrome ANGLE Buffer Overflow
CVE ID :CVE-2026-87654
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87654
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87655 - Google Chrome UI Redressing Vulnerability
CVE ID :CVE-2026-87655
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87655
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87656 - Google Chrome Safebrowsing Improper State Validation
CVE ID :CVE-2026-87656
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87656
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87657 - Google Chrome V8 Use-After-Free Vulnerability
CVE ID :CVE-2026-87657
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87657
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87658 - Google Chrome Extensions Cross-Origin Information Disclosure
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21095 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21096 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21097 - Samsung ActivityTaskManagerService Improper Authentication Vulnerability
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21098 - Link to Windows Improper Access Control Vulnerability
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21099 - SettingsProvider Improper Access Control Vulnerability
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21100 - SystemUI Improper Access Control Vulnerability
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21101 - DualDAR Driver Improper Input Validation Privilege Escalation
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21102 - DualDAR Use-After-Free Vulnerability
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21103 - GalaxyDiagnostics Path Traversal Vulnerability
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...