CVE-2026-79072

A flaw was found in Google Chrome. A remote attacker could exploit improper state validation in the Performance component by crafting a malicious HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure...

CVE-2026-79069

A flaw was found in Google Chrome's Tint component on macOS. A remote attacker could exploit a memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-79053

A flaw was found in Lighthouse in Google Chrome. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page to the...

CVE-2026-79048

A flaw was found in ANGLE, a graphics abstraction layer used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code within the sandbox...

CVE-2026-79067

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows them to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-79043

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79012

A flaw was found in Chromium's Safebrowsing component. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-78978

A flaw was found in ANGLE, a component within Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information...

CVE-2026-78939

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513261751...

CVE-2026-78906

A flaw was found in Chromium's ANGLE component. A race condition, triggered by a specially crafted HTML page, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This could lead to a complete compromise of the affected system...

CVE-2026-78905

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

CVE-2026-78901

A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78900

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to craft a malicious HTML page. When processed, this page can lead to arbitrary code execution outside the browser's security sandbox, potentially compromising the user's system...

CVE-2026-78899

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540430406...

CVE-2026-79231

A flaw was found in Chromium's Media component. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79235

A flaw was found in WebGL within Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79213

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...

CVE-2026-79209

A flaw was found in Google Chrome's Animation component. A remote attacker could exploit a type confusion vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code within the browser's sandbox, leading to unauthorized actions or data...