CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information...

CVE-2026-78901

A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78905

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

CVE-2026-78900

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to craft a malicious HTML page. When processed, this page can lead to arbitrary code execution outside the browser's security sandbox, potentially compromising the user's system...

CVE-2026-79231

A flaw was found in Chromium's Media component. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79213

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...

CVE-2026-79198

A flaw was found in Google Chrome. This use-after-free vulnerability in the Platform component allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can bypass security restrictions and run malicious code within the browser's...

CVE-2026-79200

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...

CVE-2026-79189

A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79110

A flaw was found in chromium-browser. This missing authorization vulnerability in the Preload component allows a remote attacker to bypass the web origin policy by tricking a user into opening a specially crafted HTML page. This could lead to unauthorized access to sensitive information or action...

CVE-2026-79097

A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the sandbox environment, potentially leading to a compromise of the affected...

CVE-2026-79073

A flaw was found in the Parser component of Google Chrome. This vulnerability, caused by improper state validation, allows a remote attacker to potentially execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page. This coul...

Update Chrome before you browse again

Chrome is rolling out an update for its desktop browser. The update includes 327 security fixes, ten of which address critical vulnerabilities. The stable channel has been updated to 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. How to update Chrome If you don’t want to wait...

Linux Distros Unpatched Vulnerability : CVE-2026-78999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and...

Linux Distros Unpatched Vulnerability : CVE-2026-79105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-79075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2026-79275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-79220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...