CVE-2026-79077

A vulnerability exists in Google Chrome (prior to version 152.0.7977.65 ) where incorrect authorization in WebProtect allows a remote attacker to bypass system access restrictions. This can be triggered by a crafted HTML page . Impacted versions include the Chromium package. Remediation involves ...

CVE-2026-79289

A flaw was found in Chromium (Google Chrome) prior to version 152.0.7977.65 where improper control of a resource during its lifetime in Workers allowed a remote attacker who had already compromised the renderer process to bypass site isolation . This could be achieved through a specially crafted ...

CVE-2026-79124

A vulnerability in Google Chrome on Android prior to version 152.0.7977.65 allows a remote attacker to leak sensitive information. The root cause is the improper handling of Intents , which can be triggered by enticing a user to visit a specially crafted HTML page . This flaw results in an inform...

CVE-2026-79025

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79025

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-66017

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79141

A vulnerability exists in the Browser component of Google Chrome (prior to version 152.0.7977.65 ). This Incorrect authorization flaw allows a remote attacker to bypass the web origin policy by utilizing a crafted HTML page. The issue is rated as Medium severity. Remediation is available in versi...

EUVD-2026-66012

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-66010

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79004

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79185

A vulnerability in the DOM of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass web origin policies using a crafted HTML page. This results in an information leak . Mitigation is available in version 152.0.7977.65 and subsequent releases, including the Debian 12 p...

EUVD-2026-66007

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79075

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79221

Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79075

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...