CVE-2026-79285

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79285

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79120

CVE-2026-79120 is an uninitialized resource vulnerability in ANGLE , a graphics rendering component used by Google Chrome and Chromium-based Microsoft Edge . In Chrome versions prior to 152.0.7977.65 , a remote attacker can potentially obtain cross-origin data by enticing a user to visit a crafte...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65894

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

A race condition in the Payments component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to leak cross-origin data by rendering a crafted HTML page. The Chromium security team rated this as Medium severity; the assigned C...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

CVE-2026-79095 is an information leak in the Payments component of Google Chrome prior to version 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by luring a user into visiting a crafted HTML page . The CVSS 3.1 score is 4.3 (Medium) with required user interaction. The fix ...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Skia , the rendering library used by Google Chrome , is affected by an information leak that allows a remote attacker to obtain cross-origin data via a crafted HTML page. The vulnerability affects Chrome versions prior to 152.0.7977.65 and is rated Medium severity (CVSS 4.3, network vector, low c...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65863

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79016

CVE-2026-79016 is an observable discrepancy in SVG handling in Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , violating the same-origin policy. Chromium assigns it a Medium security severity. The fix is included in...

CVE-2026-79016

Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78958

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78958

CVE-2026-78958 is an uninitialized resource vulnerability in the Skia library within Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page to the victim. The Chrom...