CVE-2026-78987

A flaw was found in Google Chrome. A remote attacker could exploit an information leak in the Canvas component by crafting a malicious HTML page. This vulnerability allows the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive information...

CVE-2026-78980

A flaw was found in ReaderMode in Google Chrome. A remote attacker, by leveraging social engineering, could exploit improper input validation to bypass the web origin policy. This allows the attacker to access a privileged page via a specially crafted HTML page, potentially leading to unauthorize...

CVE-2026-78969

A flaw was found in Google Chrome. An uninitialized resource in the Video component could allow a remote attacker to read sensitive information. This can be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized data access within the browser'...

CVE-2026-78967

A flaw was found in chromium-browser. Missing authorization in the Back-Forward Cache BFCache component of Google Chrome allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by an attacker who has already compromised the renderer process, through the...

CVE-2026-78962

A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...

CVE-2026-78959

A flaw was found in Google Chrome's FileSystem. This improper handling of case sensitivity could allow a remote attacker, leveraging social engineering, to bypass system access restrictions. The attacker could achieve this by enticing a user to visit a crafted HTML page...

CVE-2026-78942

A flaw was found in the Loader component of Google Chrome. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to bypass the web origin policy by sending specially crafted network traffic. Bypassing the web origin policy can lead to unauthorized access to...

CVE-2026-78946

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the 'Select' component allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origi...

CVE-2026-78953

A flaw was found in Google Chrome. This missing authorization vulnerability in SiteIsolation allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This can be achieved by providing a specially crafted PDF file...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-78940

A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

CVE-2026-78915

A flaw was found in Google Chrome. A race condition in the Enterprise feature on Windows could allow an adjacent attacker to potentially execute arbitrary code outside the sandbox. This vulnerability is triggered by crafted network traffic, leading to unauthorized control over the affected system...

CVE-2026-79226

A flaw was found in chromium-browser. This vulnerability, related to improper privilege management in Regional Capabilities, allows a remote attacker to bypass system access restrictions. By leveraging social engineering and a crafted Chrome extension, an attacker can gain unauthorized access...

CVE-2026-79221

A flaw was found in Dawn, a component of Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox environment,...

CVE-2026-79234

A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...

CVE-2026-79192

A flaw was found in Google Chrome. This improper input validation vulnerability, specifically within the Variations component, could allow a remote attacker to bypass the web origin policy. This bypass is achieved by sending specially crafted network traffic, potentially leading to unauthorized...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...