CVE-2026-79177

CVE-2026-79177 is an incorrect authorization flaw in the Media component of Google Chrome on Windows prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass system access restrictions via a crafted HTML page. The CVSS 3.1 score is 6.5 (Medium) (AV:N/...

CVE-2026-78968

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78946

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78968

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79041

Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78968

CVE-2026-78968 is a missing authorization flaw in the Core component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can potentially spoof the address bar via a crafted HTML page, misleading users about the authenticity of a website. Th...

CVE-2026-79041

CVE-2026-79041 is a missing authorization flaw in the Browser component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into opening a crafted HTML page, which bypasses the web origin policy and grants access ...

CVE-2026-78946

An incorrect authorization vulnerability in the Select component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. Per Red Hat, this could lead to unauthorized access to sensitive information or actions across differ...

CVE-2026-79041

Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78946

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79005

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79005

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79005

CVE-2026-79005 is an incorrect authorization flaw in the StorageAccessAPI of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , while the CNA-a...

CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

CVE-2026-79261 is an incorrect authorization flaw in the Controls component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass web origin policy via a crafted HTML page. Chromium rates it Low severity; the CVSS 3.1 score is 4.3 (Medium) with a network vector, low compl...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79190

CVE-2026-79190 is an incorrect authorization flaw in Google Chrome Extensions , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorize...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...