CVE-2026-79038

An incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. The attack requires user interaction but no prior access, with a CVS...

CVE-2026-79107

CVE-2026-79107 is an incorrect authorization flaw in the TabGroups feature of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic that requires user interaction, potentially leaking sensitive information from the user's browser. The CVSS 3.1 ...

CVE-2026-78907

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78907

An incorrect authorization flaw in the WebProtect component of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to leak sensitive information by enticing a user to visit a crafted HTML page. The Chromium security team rated this Medium severity; CVSS 3.1 scores it 6.5 (ne...

CVE-2026-78907

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

CVE-2026-79095 is an information leak in the Payments component of Google Chrome prior to version 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by luring a user into visiting a crafted HTML page . The CVSS 3.1 score is 4.3 (Medium) with required user interaction. The fix ...

CVE-2026-78991

Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78991

Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78991

A race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to obtain sensitive information by enticing a user to visit a crafted HTML page. The Chromium team rated this Medium severity. The CISA SSVC assessment ...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

CVE-2026-79271 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , obtaining sensitive information (CVSS 6.5 Medium, high confidentiality impact). The fix is available in ...

CVE-2026-79144

Skia , the rendering library used by Google Chrome , is affected by an information leak that allows a remote attacker to obtain cross-origin data via a crafted HTML page. The vulnerability affects Chrome versions prior to 152.0.7977.65 and is rated Medium severity (CVSS 4.3, network vector, low c...

EUVD-2026-65863

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass the web origin policy via a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information . The CVSS v3.1 score is ...