CVE-2026-79226

Google Chrome prior to 152.0.7977.65 is affected by an improper privilege management flaw in the Regional Capabilities component. A remote attacker leveraging social engineering can exploit this through a crafted Chrome extension to bypass system access restrictions . Chromium rates the severity ...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79213

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79067

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. The attac...

CVE-2026-79213

An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The Chromium security team rated this Medium severity. The fix is a...

CVE-2026-79259

CVE-2026-79259 is an improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this flaw via a crafted file to bypass system access restrictions . Chromium rates the severity as Medium . The fix is available in ...

CVE-2026-79259

Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79137

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79087

An injection vulnerability in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. The Chromium project assigned a severity of Medium . Updating to version 152.0.7977.65 or later is the indicated re...

CVE-2026-79137

This vulnerability affects Google Chrome prior to version 152.0.7977.65 , specifically the Extensions subsystem. The root cause is an incorrect authorization flaw that allows a remote attacker, leveraging social engineering , to bypass system access restrictions through a crafted Chrome extension...

CVE-2026-78898

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78898

CVE-2026-78898 is an incorrect authorization vulnerability in the Downloads component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could exploit a crafted HTML page to bypass system access restrictions . Chromium rates this as Medium severity. The f...

EUVD-2026-65852

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78898

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79032

CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...

CVE-2026-79032

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

CVE-2026-79088

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...