CVE-2026-79024

An information leak exists in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain sensitive information. The vulnerability has been addressed in various distributions, including a fix...

EUVD-2026-65945

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65940

UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79173

A UI misrepresentation vulnerability exists in Google Chrome (and Chromium ) prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by crafting a malicious HTML page to spoof user interface elements, potentially deceiving the user. For Debian 12 bookworm , the issue is addressed...

EUVD-2026-65937

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

Google Chrome contains an incorrect authorization vulnerability in the DOM affecting versions prior to 152.0.7977.65 . This flaw allows a remote attacker to obtain sensitive information by viewing a specially crafted HTML page. The vulnerability is categorized with a Medium security severity. Rem...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79094

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65939

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78905

A type confusion vulnerability in the ANGLE component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. This vulnerability is addressed in several distributions, including Debian 12 , w...

CVE-2026-79050

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79050

An incorrect authorization vulnerability in the Network component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass system access restrictions. The exploit is triggered by enticing a user to open a specially crafted HTML page , potentially leading to unauthoriz...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65929

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...