11426 matches found
CVE-2026-78950
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79077
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79001
CVE-2026-79001 is an information leak in the Bluetooth component of Google Chrome on Mac , fixed in version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information via a crafted HTML page. Chromium rates ...
CVE-2026-79124
Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79077
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79185
CVE-2026-79185 is an information leak in the DOM (Document Object Model) of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page , potentially exposing sensitive data across origins. The CNA rates it Me...
CVE-2026-79182
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-66007
Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79075
CVE-2026-79075 is an information leak in the Geolocation feature of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by tricking a user into visiting a crafted HTML page via social engineering, resulting in disclosure of sensitive user information. The CVSS v3.1 score is ...
CVE-2026-79097
A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome (Chromium) prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. According to the Red Hat advisory, this can potentially lead to a compromise of the affected...
CVE-2026-79033
Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79252
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79252
CVE-2026-79252 is an information leak in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by enticing a user to visit a crafted HTML page . The underlying flaw allows data from other origins to be leaked through the ServiceWorker...
CVE-2026-79258
An incorrect authorization flaw in WebXR within Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to obtain cross-origin data . The CVSS 3.1 score is 6.5 (Medium) , with a high confidentiality impact but no integrity or availabi...
CVE-2026-79258
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79265
CVE-2026-79265 is an incomplete cleanup vulnerability in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage social engineering and a crafted HTML page to obtain sensitive information . Chromium rat...
CVE-2026-79220
Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78951
A use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. Chromium classifies the severity as Medium , while the NVD/CNA-assigned C...