CVE-2026-79015

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79108

UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66035

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79077

CVE-2026-79077 is an incorrect authorization flaw in WebProtect , a component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass system access restrictions , resulting in low integrity impact. Chromium rates the severity as Low ; the CVSS...

CVE-2026-79025

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, bypassing system access restrictions . The vulnerabili...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

An incorrect authorization flaw in the Device component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Medium severity (CVSS 3.1: 4.3 , vector AV:N/AC:L/PR:N...

CVE-2026-78959

CVE-2026-78959 affects the FileSystem component in Google Chrome prior to 152.0.7977.65 . The root cause is improper handling of case sensitivity, allowing a remote attacker who leverages social engineering to bypass system access restrictions by getting a user to visit a crafted HTML page. The C...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79099

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79099

CVE-2026-79099 is a missing authorization vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium rates it Medium severity; the CVSS 3.1 score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U...

CVE-2026-79094

A race condition in the Workers component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass system access restrictions by serving a crafted HTML page. The flaw is rated Medium severity (CVSS 6.5: network vector, low complexity, user interaction required, high integrity im...

CVE-2026-79151

Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79151

CVE-2026-79151 is an improper input validation flaw in Safebrowsing in Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted file. The vulnerability requires user interaction (opening the crafted file) and impacts integrity with a CVS...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in the Back-Forward Cache (BFCache) component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass system access restrictions . The Chromium se...

CVE-2026-79143

CVE-2026-79143 is an incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass system access restrictions via a crafted HTML page. The CVSS 3.1 score is 4.3 (Medium) , requiring user int...