25554 matches found
CVE-2026-79028
A flaw in the Network component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to obtain sensitive information by navigating to a crafted HTML page . The vulnerability is characterized as an observable discrepancy (CWE-203) and has a Chromium security severity of Mediu...
CVE-2026-78898
Google Chrome versions prior to 152.0.7977.65 are vulnerable to an incorrect authorization issue in the Downloads component. A remote attacker can use social engineering and a crafted HTML page to bypass system access restrictions. This vulnerability impacts Chromium -based software, including di...
CVE-2026-78898
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79028
Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65847
Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79032
A security vulnerability in Google Chrome (and the underlying Chromium component) was identified involving improper input validation within the Network component. This flaw exists in versions prior to 152.0.7977.65 , where a remote attacker who has already compromised the renderer process could u...
EUVD-2026-65845
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78941
A vulnerability in the Core component of Google Chrome (prior to version 152.0.7977.65 ) allows for an information leak . A remote attacker who has successfully compromised the renderer process can exploit this by using a crafted HTML page to bypass site isolation . The security severity is rated...
EUVD-2026-65842
Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78966
Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79186
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79186
A vulnerability exists in the Network component of Google Chrome prior to version 152.0.7977.65 . Due to incorrect authorization , a remote attacker who has already compromised the renderer process can bypass site isolation by using a crafted HTML page. This issue is rated with a Medium security ...
CVE-2026-78966
Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65836
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79104
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79044
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79104
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...