604877 matches found
CVE-2026-79025
Google Chrome prior to 152.0.7977.65 contains an improper input validation vulnerability in the Workers component. A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page . Chromium rates the severity as Medium . Th...
CVE-2026-78974
CVE-2026-78974 is a UI misrepresentation vulnerability in the Linux Toolkit Theming component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could use a crafted HTML page to bypass system access restrictions. Chromium classifies th...
CVE-2026-78974
UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79025
Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79211
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79211
CVE-2026-79211 is an incorrect authorization vulnerability in the USB subsystem of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could bypass system access restrictions by delivering a crafted HTML page to a victim. The Chromium security team rates the ...
CVE-2026-79003
CVE-2026-79003 is an incorrect authorization vulnerability in the Device component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could exploit this via a crafted HTML page to bypass system access restrictions . Chromium assigned a M...
CVE-2026-79003
Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78959
Google Chrome prior to 152.0.7977.65 contains a vulnerability in the FileSystem component caused by improper handling of case sensitivity . A remote attacker, leveraging social engineering , can bypass system access restrictions by delivering a crafted HTML page. The Chromium security severity is...
CVE-2026-78892
CVE-2026-78892 is an incorrect authorization vulnerability in Chromoting , a component of Google Chrome on Windows . Affected versions are prior to 152.0.7977.65 . A local attacker can exploit this flaw to bypass system access restrictions through a local program, potentially elevating privileges...
CVE-2026-78959
Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79099
Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...
CVE-2026-79276
Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79099
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79276
CVE-2026-79276 is an improper privilege management flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions. The Chromium project rates the severity as Mediu...
CVE-2026-79094
CVE-2026-79094 is a race condition in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass system access restrictions . Chromium assigned it a Medium security severity. The fix is available in ...
CVE-2026-79094
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79050
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79151
An improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Rated Medium severity by Chromium, the flaw enables remote exploitation, though specific user...