CVE-2026-79143

CVE-2026-79143 is an incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass system access restrictions via a crafted HTML page. The CVSS 3.1 score is 4.3 (Medium) , requiring user int...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in the Back-Forward Cache (BFCache) component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass system access restrictions . The Chromium se...

CVE-2026-79049

An incorrect reference resolution flaw in the Passwords component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a specially crafted file. Per Red Hat, this could lead to unauthorized access to sensitive system resources . The CV...

CVE-2026-79199

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering can potentially bypass system access restrictions via a crafted HTML page, resulting in a low impact on integrity with no i...

EUVD-2026-65902

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79226

An improper privilege management flaw in the Regional Capabilities component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering, to bypass system access restrictions via a crafted Chrome extension. Microsoft Edge (Chromium-based) is also affected. The ...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79067

CVE-2026-79067 is a missing authorization flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the browser's renderer process could exploit it via a crafted HTML page to bypass system access restrictions . The vulnerability ...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79032

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79088

CVE-2026-79088 is an incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions , resulting in high integrity impact (CVSS 3.1 score: 6...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

PT-2026-81643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Passwords component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome ...

PT-2026-81613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ServiceWorker allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A ServiceWorker is a script that the browser...

PT-2026-81629

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81785

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass system access restrictions via UI Interaction by leveraging social engineering. Recommendations Upda...

PT-2026-81570

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper handling of case sensitivity in the FileSystem allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HT...

PT-2026-81691

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Web Authentication Passkeys & Security Keys allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page...