CVE-2026-79218

Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78939

A use after free vulnerability in Chromecast within Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox using a crafted HTML page. This vulnerability affects Chromium-based browsers...

CVE-2026-79218

Google Chrome and Chromium are affected by a high-severity vulnerability involving incorrect authorization in the Sandbox . A remote attacker who has successfully compromised the renderer process can exploit this flaw via a crafted HTML page to potentially execute arbitrary code outside of the sa...

CVE-2026-79175

A type confusion vulnerability exists in the Accessibility component of Google Chrome on Windows (versions prior to 152.0.7977.65 ). A remote attacker who has successfully compromised the renderer process can leverage this flaw to execute arbitrary code outside the sandbox via a crafted HTML page...

CVE-2026-79069

A memory corruption vulnerability exists in Tint within Google Chrome and Chromium-based browsers (including Microsoft Edge ). On macOS systems using versions prior to 152.0.7977.65 , a remote attacker could potentially execute arbitrary code outside the sandbox by viewing a crafted HTML page. Th...

CVE-2026-79200

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79150

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65762

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79150

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65969

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78989

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65970

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65761

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79150

A Use after free vulnerability in Views within Google Chrome on Mac (prior to version 152.0.7977.65) allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This issue is also present in Chromium-based browsers, including Microsoft Edge . The vulnerability ...

CVE-2026-78935

Google Chrome on iOS (prior to version 152.0.7977.65) is vulnerable to an uninitialized variable flaw in its Mobile component. A remote attacker could exploit this via a crafted HTML page to potentially execute arbitrary code outside the sandbox . The vulnerability has a Critical security severit...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...