CVE-2026-78958

CVE-2026-78958 is an uninitialized resource vulnerability in the Skia library within Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page to the victim. The Chrom...

CVE-2026-79106

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Input component. A remote attacker who had already compromised the renderer process and leveraged social engineering could bypass the web origin policy using a crafted HTML page. The Chromium security tea...

CVE-2026-79176

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79106

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65837

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65838

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78961

CVE-2026-78961 is an incorrect authorization vulnerability in the Core component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can craft an HTML page that bypasses the web origin policy . The C...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

CVE-2026-79076

CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by sending crafted network traffic to obtain sensitive information from the browser. The Chromium project classifies the severity as Med...

CVE-2026-79044

Google Chrome on Android prior to 152.0.7977.65 is affected by a missing authorization flaw in the WebAppInstalls component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information. The Chromium security severity ...

CVE-2026-79104

CVE-2026-79104 is a missing authorization vulnerability in the Sensor component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could obtain sensitive information by serving a crafted HTML page. The Chromium project rates this a...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security team classified this as Medium severity, ...

CVE-2026-79007

CVE-2026-79007 is an uninitialized resource vulnerability in the GPU component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially read memory outside the sandbox by delivering a crafted HTML page. The Chromium pro...

CVE-2026-79222

CVE-2026-79222 is an incorrect authorization flaw in CustomTabs in Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker can leverage a co-installed app to bypass the web origin policy , potentially gaining unauthorized access to web content or data within Chrome...

CVE-2026-79030

An observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page. The vulnerability was rated Medium severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65 or later. No...

EUVD-2026-65827

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

CVE-2026-79071 is a race condition in the GPU component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium assigns it a Medium security s...

CVE-2026-78893

An information leak vulnerability exists in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw via a crafted HTML page to exfiltrate sensitive information from the browser. Chromium classifies the security severity as Medium . The fix is a...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...