CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

CVE-2026-79033 affects Google Chrome DevTools prior to version 152.0.7977.65 , caused by insufficient control flow management . A remote attacker leveraging social engineering can potentially execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is rate...

CVE-2026-79203

Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79227

CVE-2026-79227 is a type confusion vulnerability in Google Chrome DevTools (versions prior to 152.0.7977.65 ). A remote attacker leveraging social engineering could deliver a crafted HTML page that executes arbitrary code inside the Chrome sandbox . The CVSS 3.1 score is 8.8 (High) , with a netwo...

CVE-2026-79203

CVE-2026-79203 is an improper input validation flaw in DevTools within Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to bypass site isolation , a security feature that ensures content from differen...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79154

Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. Chromium security severity: Medium...

CVE-2026-79154

CVE-2026-79154 is a missing authorization flaw in DevTools in Google Chrome prior to version 152.0.7977.65 . A remote attacker, by leveraging social engineering and user interface interaction , can obtain sensitive information. The CVSS 3.1 score is 6.5 (Medium) with a network attack vector and h...

CVE-2026-78944

A use after free vulnerability in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension. The vulnerability is classified by Chromium as Medium severity but carries a CV...

PT-2026-81630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Insufficient control flow management in DevTools allows a remote attacker to potentially execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering to...

PT-2026-81726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An off-by-one error in DevTools allows a remote attacker to potentially read memory inside the sandbox. This issue can be exploited through social engineering using a crafted Chrome...

PT-2026-81826

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extensio...

PT-2026-81556

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extensio...

PT-2026-81787

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in DevTools. A remote attacker can use social engineering to lure a user to a crafted HTML page, leading to arbitrary code execution within the sandbox. Ty...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-53766

creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:16+00:00| published-proof-of-concept| https://github.com/ChromeDevTools/chrome-devtools-mcp/security/advisories/GHSA-8qf9-62x2-82pp 2026-08-18 02:33:46+00:00| seen| https://gist.github.com/alon710/259d2014ae004d0972fa015a9b341f1e...

EUVD-2026-39104

chrome-devtools-mcp: validatePath does not canonicalize symlinks before enforcing roots...

browser-ipc-cdp (>=2.0.0, <=3.13.0), chrome-devtools-mcp-docker (>=0.1.5, <=0.1.7) +1 more potentially affected by CVE-2026-53766 via chrome-devtools-mcp (0.25.0)

chrome-devtools-mcp NPM version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on chrome-devtools-mcp and may be impacted: - browser-ipc-cdp =2.0.0, =0.1.5, =1.0.1, =1.0.9 Source cves: CVE-2026-53766 Source advisory: OSV:GHSA-8QF9-62X2-82PP...