23958 matches found
CVE-2026-78949
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-78949
CVE-2026-78949 affects the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . The root cause is an observable discrepancy in CustomTabs that allows a local attacker to obtain cross-origin data by exploiting a co-installed application. The impact is limited to unauthorized i...
CVE-2026-78949
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79146
An information leak in CustomTabs in Google Chrome for Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed application. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, no privileges required, user interaction required, and a high i...
CVE-2026-79146
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79146
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-65952
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79193
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79193
CVE-2026-79193 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , enabling the leak of cross-origin data to a victim who interacts with the page. The flaw is rated Medium severity by both ...
CVE-2026-79193
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78976
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78976
CVE-2026-78976 is an improper input validation flaw in the StorageAccessAPI component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page,...
CVE-2026-78976
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79272
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79272
CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process can use a specially crafted HTML page to leak cross-origin data , bypassing s...
CVE-2026-79272
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78936
CVE-2026-78936 is an information disclosure flaw in CustomTabs within Google Chrome on Android prior to version 152.0.7977.65 . An observable discrepancy allows a local attacker , through a co-installed application , to obtain sensitive cross-origin data . The CVSS 3.1 score is 2.9 (Low) with an ...