CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79233

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79206

Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

A flaw in the Glic component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to obtain sensitive information . This vulnerability is triggered by enticing a user to visit a specially crafted HTML page . The impact is characterized as an observable discrepancy with a Me...

CVE-2026-78950

An integer overflow vulnerability exists in WebRTC within Google Chrome prior to version 152.0.7977.65 . A remote attacker could potentially execute arbitrary code inside the sandbox by navigating to a crafted HTML page. This issue has been addressed in various distributions, including Debian 12 ...

EUVD-2026-66030

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78979

Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79077

A vulnerability exists in Google Chrome (prior to version 152.0.7977.65 ) where incorrect authorization in WebProtect allows a remote attacker to bypass system access restrictions. This can be triggered by a crafted HTML page . Impacted versions include the Chromium package. Remediation involves ...

CVE-2026-79001

An information leak exists in Bluetooth within Google Chrome on Mac systems prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage social engineering to trick a user into visiting a crafted HTML page , potentially resulting in the disclosu...

CVE-2026-79289

A flaw was found in Chromium (Google Chrome) prior to version 152.0.7977.65 where improper control of a resource during its lifetime in Workers allowed a remote attacker who had already compromised the renderer process to bypass site isolation . This could be achieved through a specially crafted ...

CVE-2026-79124

A vulnerability in Google Chrome on Android prior to version 152.0.7977.65 allows a remote attacker to leak sensitive information. The root cause is the improper handling of Intents , which can be triggered by enticing a user to visit a specially crafted HTML page . This flaw results in an inform...