CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65879

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65878

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78891

A buffer overflow in WebRTC within Google Chrome versions prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox using a crafted HTML page. The vulnerability is categorized with a High base severity (CVSS 3.1: 8.8) and has a Network attack vector with Low com...

CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This issue is rooted in incorrect authorization during input processing. Remediation involves updating th...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79084

Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

An information leak in the Payments component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to obtain cross-origin data by navigating the user to a crafted HTML page. This vulnerability has a Medium security severity. Remediation involves updating the Chromium packag...

CVE-2026-79128

A use after free vulnerability exists in the Views component of Google Chrome on Mac (versions prior to 152.0.7977.65). A remote attacker can leverage this flaw via a crafted HTML page to execute arbitrary code outside the sandbox . This issue has been addressed in several distributions, includin...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78909

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

A vulnerability in Google Chrome prior to version 152.0.7977.65 allows for an information leak in the DOM . A remote attacker can exploit this by leveraging social engineering to trick a user into visiting a crafted HTML page , which can then be used to obtain sensitive information. This issue ha...

EUVD-2026-65862

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...