CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79005

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79123

Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79005

CVE-2026-79005 is an incorrect authorization flaw in the StorageAccessAPI of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , while the CNA-a...

CVE-2026-79243

CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy via a crafted HTML page, potentially gaini...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79190

CVE-2026-79190 is an incorrect authorization flaw in the Extensions component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium assigned this a Low security...

EUVD-2026-66028

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-78979

CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . The flaw allowed a remote attacker, leveraging social engineering, to bypass web origin policy via a crafted HTML page. Chromium assigned a Low security severity. No ...

CVE-2026-79000

CVE-2026-79000 is a low-severity improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can craft network traffic to bypass the web origin policy . The Chromium project classifies the se...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79141

Google Chrome prior to 152.0.7977.65 contained an incorrect authorization flaw in the Browser component. A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy . Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.65 ...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass the web origin policy , potentially exposing data that should be isolated between origins. Chromium rates the severity as...

CVE-2026-79068

Google Chrome prior to 152.0.7977.65 is affected by an improper resource exposure in the StreamsAPI component. A remote attacker can potentially bypass the web origin policy into a privileged page by delivering a crafted HTML page. Chromium rates this as Medium severity. Remediation is to update ...

CVE-2026-79085

CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin resources that...

CVE-2026-79269

CVE-2026-79269 is an uninitialized resource vulnerability in ANGLE , a component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to potentially bypass the web origin policy . Chromium rates the severity as Medium . The fix is available in Chr...

CVE-2026-79178

CVE-2026-79178 is an incorrect authorization flaw in Web Authentication (Passkeys & Security Keys) within Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorized access to WebAuthn credentia...

CVE-2026-79205

CVE-2026-79205 is an incorrect authorization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. Chromium rate...

CVE-2026-79070

CVE-2026-79070 is an incorrect reference resolution flaw in the Cache component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65. N...