CVE-2026-79009

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a UI misrepresentation flaw. A remote attacker can use social engineering and a crafted HTML page to spoof UI elements , potentially tricking users into performing malicious actions like phishing. The vulnerability is listed with a L...

CVE-2026-78896

A vulnerability in Google Chrome prior to version 152.0.7977.65 allows a remote attacker to obtain cross-origin data via a crafted HTML page through an information leak in the StorageAccessAPI . The Chromium security severity is rated as Low . Remediation involves updating to version 152.0.7977.7...

CVE-2026-78946

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78946

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78946

A vulnerability in the Select feature of Google Chrome (prior to version 152.0.7977.65 ) was caused by incorrect authorization . This flaw allowed a remote attacker to bypass the web origin policy by using a crafted HTML page. The vulnerability has been addressed in several distributions, includi...

CVE-2026-79284

UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79041

The Google Chrome browser on Mac (prior to version 152.0.7977.65 ) is vulnerable to a missing authorization flaw in the Browser component. A remote attacker could use social engineering to deliver a crafted HTML page , allowing them to bypass the web origin policy and access a privileged page. Fo...

CVE-2026-79090

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a flaw in the Actor component involving improper privilege management . A remote attacker can bypass system access restrictions by leveraging social engineering techniques through a specially crafted HTML page . For Debian 12 bookwor...

CVE-2026-79040

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79040

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79123

Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79273

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79273

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79273

A flaw in the WebView component of Google Chrome on Android (prior to version 152.0.7977.65) involves incorrect reference resolution . A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page to bypass the web origin policy , potentially leading to unauthoriz...

CVE-2026-79123

Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79147

A vulnerability in Skia within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to potentially leak sensitive information via a crafted HTML page . The vulnerability is classified with a Medium CVSS score and a Low Chromium security ...

CVE-2026-79022

A UI misrepresentation vulnerability exists in the Transactions Platform of Google Chrome (prior to version 152.0.7977.65 ). This flaw allows a remote attacker to potentially spoof UI elements by leveraging social engineering techniques through a crafted HTML page. Exploitation details are not pr...

CVE-2026-79233

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

A flaw in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This is due to an incorrect authorization vulnerability within the Controls component. Exploitation could potentially lead to unauthorized access t...