CVE-2026-79093

Google Chrome's Paint component (prior to version 152.0.7977.65 ) is vulnerable to an incorrect authorization flaw. This issue allows a remote attacker to potentially bypass the web origin policy by delivering a crafted HTML page. The vulnerability is classified with High security severity by Chr...

CVE-2026-79187

A use after free vulnerability exists in WebRTC within Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by using a crafted HTML page to execute arbitrary code inside the sandbox. This vulnerability has been addressed in the chromium package, specifically fixed i...

CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65779

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79202

A use after free vulnerability exists in Chromecast within Google Chrome (prior to version 152.0.7977.65 ). This flaw allows a remote attacker to execute arbitrary code inside the sandbox by hosting a crafted HTML page . The vulnerability has been addressed in various distributions, including Fed...

EUVD-2026-65776

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a UI misrepresentation flaw. A remote attacker using social engineering can use a crafted HTML page to bypass system access restrictions. This vulnerability impacts the Chromium project, which also affects browsers like Microsoft Edg...

CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65766

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

A memory corruption vulnerability exists in Tint within Google Chrome and Chromium-based browsers (including Microsoft Edge ). On macOS systems using versions prior to 152.0.7977.65 , a remote attacker could potentially execute arbitrary code outside the sandbox by viewing a crafted HTML page. Th...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

A use after free vulnerability in the Script component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This issue also impacts Chromium-based browsers, including Microsoft Edge . Remediation includes ...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...