SUSE CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79276

A flaw was found in Google Chrome's FileSystem component. This improper privilege management vulnerability allows a remote attacker, leveraging social engineering, to bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page...

CVE-2026-79258

A flaw was found in WebXR within Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, to obtain sensitive cross-origin data. This could lead to unauthorized information disclosure...

CVE-2026-79055

A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...

CVE-2026-79225

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...

CVE-2026-79089

A flaw was found in Google Chrome's Transactions Platform on Android. A race condition vulnerability allows a remote attacker, through social engineering and a specially crafted HTML page, to bypass system access restrictions. This could lead to unauthorized access to sensitive system functions...

CVE-2026-79022

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit a user interface UI misrepresentation vulnerability. By crafting a malicious HTML page, the attacker could potentially spoof UI elements, which might mislead users...

CVE-2026-79033

A flaw was found in Chromium's DevTools. A remote attacker, leveraging social engineering, could exploit insufficient control flow management by enticing a user to open a crafted HTML page. This could potentially lead to the execution of arbitrary code within the browser's sandbox...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-79011

A flaw was found in Chromium Browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to bypass system access restrictions, potentially leading to...

CVE-2026-78911

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the USB component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation requires the attacker to first compromise the renderer process and then leverage socia...

CVE-2026-79045

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=531245718...

CVE-2026-79041

A flaw was found in Google Chrome. A remote attacker, through social engineering, could exploit a missing authorization vulnerability to bypass the web origin policy. By convincing a user to open a specially crafted HTML page, the attacker could gain access to privileged browser pages, potentiall...

CVE-2026-79003

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering tactics, could exploit an incorrect authorization vulnerability in the Device component. This could allow the attacker to bypass system access restrictions through a specially crafted HTML page...

CVE-2026-79000

A flaw was found in Google Chrome. Improper input validation in DeviceBoundSessionCredentials allows a remote attacker, leveraging social engineering, to bypass the web origin policy. This can be achieved by sending crafted network traffic, potentially leading to unauthorized access or manipulati...