CVE-2026-79022

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit a user interface UI misrepresentation vulnerability. By crafting a malicious HTML page, the attacker could potentially spoof UI elements, which might mislead users...

CVE-2026-79287

A flaw was found in chromium-browser. A remote attacker could exploit an observable discrepancy in Forms by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-79250

A flaw was found in Google Chrome. A remote attacker could exploit a user interface UI misrepresentation vulnerability by enticing a victim to visit a specially crafted HTML page. This could allow the attacker to spoof the address bar, potentially leading to phishing attacks or other deceptive...

CVE-2026-79283

A flaw was found in Google Chrome. A remote attacker could exploit a user interface UI misrepresentation vulnerability in the Geometry component by crafting a malicious HTML page. This could allow the attacker to spoof UI elements, potentially deceiving users...

CVE-2026-79291

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-79241

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the GPU component by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox,...

CVE-2026-79011

A flaw was found in Chromium Browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to bypass system access restrictions, potentially leading to...

CVE-2026-79038

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79023

A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...

CVE-2026-79030

A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...

CVE-2026-79024

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78979

A flaw was found in Chromium. This race condition vulnerability allows a remote attacker to bypass the web origin policy. By leveraging social engineering and a specially crafted HTML page, an attacker can circumvent security restrictions designed to isolate web content. This could lead to...

CVE-2026-78967

A flaw was found in chromium-browser. Missing authorization in the Back-Forward Cache BFCache component of Google Chrome allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by an attacker who has already compromised the renderer process, through the...

CVE-2026-78962

A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...

CVE-2026-78941

A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...

CVE-2026-78912

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation, allowing the attacker to spoof UI elements and potentially deceive users...

CVE-2026-79221

A flaw was found in Dawn, a component of Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox environment,...