109236 matches found
CVE-2026-79034
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS. This vulnerability allows the attacker to leak sensitive cross-origin data by tricking a user into visiting a specially crafte...
CVE-2026-79038
A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page...
CVE-2026-79023
A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...
CVE-2026-79030
A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...
CVE-2026-79024
A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...
CVE-2026-78975
A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Document Object Model DOM allows a remote attacker to obtain sensitive information. The attacker can exploit this by enticing a user to visit a specially crafted HTML page...
CVE-2026-78991
A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...
CVE-2026-78979
A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503720291...
CVE-2026-78962
A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...
CVE-2026-78967
A flaw was found in chromium-browser. Missing authorization in the Back-Forward Cache BFCache component of Google Chrome allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by an attacker who has already compromised the renderer process, through the...
CVE-2026-78941
A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...
CVE-2026-78950
A flaw was found in WebRTC, a real-time communication project, within Google Chrome. A remote attacker could exploit an an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the browser's sandbox...
CVE-2026-78912
A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation, allowing the attacker to spoof UI elements and potentially deceive users...
CVE-2026-78907
A flaw was found in chromium-browser's WebProtect component. Incorrect authorization allows a remote attacker to leak sensitive information. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-79221
An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532923954...
CVE-2026-79234
A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...
CVE-2026-79193
An information leak flaw was found in the Canvas component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517655953...
CVE-2026-79185
A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...
CVE-2026-79204
A flaw was found in chromium-browser. A remote attacker could exploit a user interface UI misrepresentation vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to spoof UI elements, potentially leading to confusion or deception of the user...