CVE-2026-79198

CVE-2026-79198 is a use-after-free vulnerability in the Platform component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code inside the browser sandbox by luring a user into visiting a crafted HTML page. The CNA-assigned CVSS v3.1 score is...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a rendering component used by Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page, potentially leading to arbitrary code execution outside the browser sandbox . The CNA...

CVE-2026-79118

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79188

An out-of-bounds write in ANGLE within Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. The vulnerability is rated High by Chromium and scores 9.6 (Critical) on CVSS 3.1. CIS...

CVE-2026-79174

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-79043

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78895

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79072

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79082

Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79111

CVE-2026-79111 is an improper input validation flaw in Dawn , the GPU abstraction layer of Google Chrome , affecting versions prior to 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the browser's se...

CVE-2026-78965

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to version 152.0.7977.65 (Windows/Mac) / 152.0.7977.64 (Linux). A remote attacker can potentially bypass the web origin policy via a crafted HTML page, which could lead to unauthorized access to sensit...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability was reported by Google...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in the WebRTC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox , potentially enabling furth...

CVE-2026-79202

CVE-2026-79202 is a use-after-free vulnerability in the Chromecast component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , allowing execution of arbitrary code inside the browser sandbox . The vuln...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...