CVE-2026-43735

CVE-2026-43735 WebKit divulgazione di informazioni cross-origin. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Principio Quando la pagina padre utilizza per attivare la navigazione di frammento di un iframe cross-origin, l'iframe riceve NavigateEvent.sourceElement che è l'elemento...

CVE-2017-17692

CVE-2017-17692 Titolo Exploit: SOP Bypass Data: 06 settembre 2017 Link Software: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Autore Exploit: Dhiraj Mishra Contatto: http://twitter.com/mishradhiraj Sito Web: http://datarift.blogspot.in/ Categoria: Browser Video...

CVE-2026-79260

CVE-2026-79260 is a Low severity vulnerability in Google Chrome prior to 152.0.7977.65 , caused by improper input validation in the Cookies component. A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to bypass the web origin policy...

CVE-2026-79152

CVE-2026-79152 is an incorrect authorization flaw in CustomTabs within Google Chrome on Android prior to 152.0.7977.65 . The vulnerability allowed a local attacker to bypass the web origin policy by leveraging a co-installed app, effectively breaking the isolation boundary that CustomTabs provide...

CVE-2026-78980

CVE-2026-78980 is an improper input validation vulnerability in the ReaderMode component of Google Chrome prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit a crafted HTML page to bypass the web origin policy and gain access to a privileged page. Chromi...

CVE-2026-78947

CVE-2026-78947 is an incomplete cleanup vulnerability in Chromium , affecting Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could use a crafted Chrome extension to bypass the web origin policy . Chromium rated the security severity as Low . The fix is t...

CVE-2026-79060

CVE-2026-79060 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy , potentially gainin...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-78946

CVE-2026-78946 is an incorrect authorization vulnerability in the Select component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage this flaw via a crafted HTML page to bypass the web origin policy , potentially allowing cross-origin data access that would normally be bl...

CVE-2026-79123

Google Chrome on Windows , prior to version 152.0.7977.65 , contains an improper input validation flaw in the NTP Footer component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass the web origin policy . Chromium rated the secu...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79005

CVE-2026-79005 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this by serving a crafted HTML page to bypass the web origin policy . The Chromium securit...

CVE-2026-79243

CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium a...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79190

CVE-2026-79190 is an incorrect authorization flaw in the Extensions component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium assigned this a Low security...

CVE-2026-78979

CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . The flaw allowed a remote attacker, leveraging social engineering, to bypass web origin policy via a crafted HTML page. Chromium assigned a Low security severity. No ...

CVE-2026-79000

CVE-2026-79000 is a low-severity improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can craft network traffic to bypass the web origin policy . The Chromium project classifies the se...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79141

Google Chrome prior to 152.0.7977.65 contained an incorrect authorization flaw in the Browser component. A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy . Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.65 ...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass the web origin policy , potentially exposing data that should be isolated between origins. Chromium rates the severity as...