CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79012

A use-after-free vulnerability in the Safebrowsing component of Google Chrome for Mac (prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code outside the browser's security sandbox by tricking a user into visiting a crafted HTML page. The vulnerability was rated Critical by t...

CVE-2026-79150

CVE-2026-79150 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-05...

CVE-2026-78989

CVE-2026-78989 is an out-of-bounds read in ANGLE , a graphics translation library component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the flaw by serving a crafted HTML page , requiring user interaction but no prior authentication. Suc...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

A use after free vulnerability in the Aura component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The bug was internally reported by Google on 2026-05-25 (Chromium bug 5164...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79052

CVE-2026-79052 is a use-after-free vulnerability in Aura , a component within Google Chrome prior to version 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can exploit this by convincing a user to visit a crafted HTML page , potentially leading to arbitrary code executio...

CVE-2026-79224

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79054

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

CVE-2026-79121 is a Critical improper input validation vulnerability in the Chromecast component of Google Chrome, fixed in version 152.0.7977.65 (152.0.7977.64 for Linux). An attacker who has already compromised the renderer process can trigger a sandbox escape via a crafted HTML page, achieving...

CVE-2026-79054

CVE-2026-79054 is a use-after-free vulnerability in the Chromecast component of Google Chrome, rated Critical by Chromium and 8.3 HIGH (CVSS v3.1). An attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code outsid...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79224

CVE-2026-79224 is a use-after-free vulnerability in the Chromecast component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbo...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

CVE-2026-79282 is a critical use-after-free vulnerability in ANGLE (Almost Native Graphics Layer Engine), the component Chrome uses to translate graphics commands for the OS and GPU. It affects Google Chrome on Android prior to 152.0.7977.65 and allows a remote attacker to execute arbitrary code ...