EUVD-2026-66001

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79227

A type confusion vulnerability exists in the DevTools component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could leverage social engineering to execute arbitrary code inside the sandbox by visiting a crafted HTML page. The vulnerability has been addressed in newer version...

CVE-2026-79097

A use-after-free vulnerability exists in the V8 engine of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to execute arbitrary code within the sandbox. Mitigation involves updating the software; for example, Debian 12 provides ...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79258

Google Chrome versions prior to 152.0.7977.65 are vulnerable to an incorrect authorization flaw in WebXR . A remote attacker can exploit this by using social engineering to trick a user into visiting a crafted HTML page , potentially allowing the attacker to obtain cross-origin data . Remediation...

CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

A vulnerability in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to leak cross-origin data via a crafted HTML page. The impact is classified as a Medium severity information leak. Remediation involves updating Chromium; for instance, Debia...

EUVD-2026-65997

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65998

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78951

A Use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by utilizing a crafted HTML page to execute arbitrary code outside the sandbox. This vulnerability has been addressed in version 152.0.7977.7...

EUVD-2026-65989

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79265

A vulnerability in Google Chrome prior to version 152.0.7977.65 was caused by incomplete cleanup in the GetUserMedia function. A remote attacker who had already compromised the renderer process could leverage social engineering to obtain sensitive information via a crafted HTML page. This issue i...

EUVD-2026-65990

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79134

Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65983

Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...