CVE-2026-79105

Improper input validation in Mobile in Google Chrome on iOS (prior to version 152.0.7977.65) allows a remote attacker to bypass system access restrictions via a crafted HTML page. This vulnerability is categorized as Low severity by the Chromium security team and results in partial technical impa...

CVE-2026-79105

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66072

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

A use-after-free vulnerability exists in the V8 engine of Google Chrome (prior to version 152.0.7977.65 ). This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. The issue has been addressed in various d...

CVE-2026-79125

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79125

A vulnerability exists in the XR component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this information leak by enticing a user to visit a crafted HTML page , potentially leading to the unauthorized disclosure of sensitive information . Remediation involves upd...

CVE-2026-79125

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66063

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

Google Chrome and other Chromium-based browsers are affected by an information leak in DataTransfer prior to version 152.0.7977.65 . A remote attacker can exploit this vulnerability to obtain sensitive information by tricking a user into visiting a crafted HTML page . Remediation includes updatin...

CVE-2026-79244

A use after free vulnerability exists in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by using a crafted HTML page to execute arbitrary code within the sandbox. This vulnerability has been addressed in various distributions, includ...

EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66067

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79239

Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78956

A type confusion vulnerability exists in the V8 engine of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. For Debian 12 bookworm , the issue is addressed in v...