CVE-2026-79239

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...

CVE-2026-79242

A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-79238

A flaw was found in ServiceWorker in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, to bypass the web origin policy. Bypassing the web origin policy could lead to unauthorized...

CVE-2026-79262

A flaw was found in Google Chrome. Incorrect authorization in the Network component allowed a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This bypass could enable an attacker to access restricted resources or data from other origins, potentially leading to...

CVE-2026-79241

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the GPU component by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox,...

CVE-2026-79045

A flaw was found in the V8 JavaScript engine within Chromium. A remote attacker could exploit a type confusion vulnerability by leveraging social engineering tactics and enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the...

CVE-2026-79041

A flaw was found in Google Chrome. A remote attacker, through social engineering, could exploit a missing authorization vulnerability to bypass the web origin policy. By convincing a user to open a specially crafted HTML page, the attacker could gain access to privileged browser pages, potentiall...

CVE-2026-79038

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79023

A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...

CVE-2026-79030

A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...

CVE-2026-79024

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2026-79020

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into processing a specially crafted media file. This could potentially allow the attacker to read sensitive memory within the browser's...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78987

A flaw was found in Google Chrome. A remote attacker could exploit an information leak in the Canvas component by crafting a malicious HTML page. This vulnerability allows the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive information...

CVE-2026-78969

A flaw was found in Google Chrome. An uninitialized resource in the Video component could allow a remote attacker to read sensitive information. This can be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized data access within the browser'...

CVE-2026-78960

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an information leak in Extensions. This vulnerability allows the attacker to obtain cross-origin data by using a specially crafted Chrome extension...

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...