CVE-2026-121239

Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121239

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an information leak flaw within the Core component. A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain cross-origin data . The vulnerability is categorized with a Medium security severity. Sightin...

EUVD-2026-116287

Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121187

Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121187

An observable discrepancy flaw was identified in the Paint component of the Google Chrome browser (prior to version 157.0.8103.38). A remote attacker could exploit this vulnerability by leveraging a crafted HTML page to obtain sensitive information . The security severity is classified as Medium ...

EUVD-2026-116481

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121059

Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121059

Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121059

A medium-severity information leak flaw exists in the Core component of Google Chrome (versions prior to 157.0.8103.38). This vulnerability allows a remote attacker to leak cross-origin data by navigating the user to a crafted HTML page . The underlying cause is associated with Chromium upstream ...

CVE-2026-121220

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw in the Core component. A remote attacker who has already compromised the renderer process can bypass system access restrictions by navigating the victim to a crafted HTML page. The vulnerability is ass...

EUVD-2026-116476

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121170

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121220

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121170

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116477

Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116475

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116472

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121040

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121231

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw within DevTools . A remote attacker can leverage a crafted HTML page to bypass system access restrictions. This vulnerability is categorized as a Medium security severity issue by Chromium.

EUVD-2026-116467

Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...