CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

CVE-2026-79193

A flaw was found in chromium-browser's Canvas component. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to access sensitive cross-origin data...

CVE-2026-79120

A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page...

CVE-2026-79095

A flaw was found in Chromium. This vulnerability, located in the Payments component, allows a remote attacker to obtain sensitive cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to an information leak...

CVE-2026-79085

A flaw was found in Chromium's Network component. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across...

CVE-2026-79082

A flaw was found in the Transactions Platform of Google Chrome. An attacker who has compromised the renderer process could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow them to bypass the web origin policy, potentially leading to unauthorized...

CVE-2026-79285

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure...

CVE-2026-79255

A flaw was found in WebRTC, a real-time communication component within Chromium. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by tricking the user into visiting...

CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information...

CVE-2026-79205

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...

CVE-2026-79116

A flaw was found in Viz in Google Chrome. Missing authorization allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized...

CVE-2026-79093

A flaw was found in Paint in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origins...

CVE-2026-78894

A flaw was found in Google Chrome. A race condition in the Payments component allows a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. This exploitation occurs when a specially crafted HTML page is rendered, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-79120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-78960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a...

Linux Distros Unpatched Vulnerability : CVE-2026-78949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-install...

Linux Distros Unpatched Vulnerability : CVE-2026-79095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-79258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via...