CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78891

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

A flaw in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This vulnerability could lead to unauthorized access to sensitive information or other security impacts. Remediation ...

CVE-2026-79248

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This issue is rooted in incorrect authorization during input processing. Remediation involves updating th...

CVE-2026-78891

A buffer overflow in WebRTC within Google Chrome versions prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox using a crafted HTML page. The vulnerability is categorized with a High base severity (CVSS 3.1: 8.8) and has a Network attack vector with Low com...

CVE-2026-79084

Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

An information leak in the Payments component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to obtain cross-origin data by navigating the user to a crafted HTML page. This vulnerability has a Medium security severity. Remediation involves updating the Chromium packag...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79128

A use after free vulnerability exists in the Views component of Google Chrome on Mac (versions prior to 152.0.7977.65). A remote attacker can leverage this flaw via a crafted HTML page to execute arbitrary code outside the sandbox . This issue has been addressed in several distributions, includin...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65863

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65862

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78909

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65864

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

A vulnerability in Google Chrome prior to version 152.0.7977.65 allows for an information leak in the DOM . A remote attacker can exploit this by leveraging social engineering to trick a user into visiting a crafted HTML page , which can then be used to obtain sensitive information. This issue ha...