3880 matches found
CVE-2026-79208
Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79208
CVE-2026-79208 is a missing authorization flaw in the HTTP2 protocol handling of Google Chrome prior to version 152.0.7977.65 . A remote attacker with no privileges required can craft specific network traffic to leak sensitive information , though the attack is rated high complexity and is not co...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79208
Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79122
CVE-2026-79122 is an information leak in the SignIn component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information via crafted network traffic , without requiring user interaction or prior authentication. The CVSS 3.1 score is 5.9 (Medium) with high impact ...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79107
Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79107
CVE-2026-79107 is an incorrect authorization flaw in the TabGroups feature of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic that requires user interaction, potentially leaking sensitive information from the user's browser. The CVSS 3.1 ...
CVE-2026-79107
Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79006
CVE-2026-79006 is a protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker to bypass the web origin policy via crafted network traffic. The CVSS 3.1 score is 4.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S...
CVE-2026-79006
Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79006
Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79192
Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-78942
CVE-2026-78942 is a Medium -severity vulnerability (CVSS 3.1: 4.3) in the Loader component of Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution allows a remote attacker to bypass the web origin policy via crafted network traffic, requiring user interaction. Accordin...
CVE-2026-79192
Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-78942
Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-65865
Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79192
CVE-2026-79192 is an improper input validation flaw in the Variations component of Google Chrome prior to 152.0.7977.65 . A remote attacker can send specially crafted network traffic to potentially bypass the web origin policy , which may enable unauthorized access or actions across different web...
CVE-2026-79076
CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by sending crafted network traffic to obtain sensitive information, with no privileges required but user interac...