CVE-2026-79051

CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could bypass web origin policy by serving a crafted HTML page to a victim. The Chromium security team rates this as Medium severity. No evidence o...

CVE-2026-79251

Improper input validation in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. The vulnerability is classified with a Chromium security severity of Medium . The fix was delivered in the stable c...

CVE-2026-78943

CVE-2026-78943 is an improper input validation vulnerability in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass the web origin policy using a crafted HTML page. The Chrom...

CVE-2026-79255

CVE-2026-79255 is an improper input validation vulnerability in WebRTC within Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. Chromium classified the securi...

CVE-2026-78940

CVE-2026-78940 is an improper initialization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium . Remediation is to ...

CVE-2026-79248

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in the Input component. A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is rated Medium , reflecting t...

CVE-2026-79110

CVE-2026-79110 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is a missing authorization in the Preload component, allowing a remote attacker to bypass the web origin policy via a crafted HTML page. Chromium rates the severity as Medium . No in-the-wild exploitation details are ...

CVE-2026-79136

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by serving a crafted HTML page to the victim. The Chromium security team classified the severity as Medium . The fix is available in Chr...

CVE-2026-79006

A protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by sending crafted network traffic. The Chromium team rated the severity as Medium . Users should update to version 152.0.7977.65...

CVE-2026-79116

CVE-2026-79116 is a missing authorization flaw in the Viz component of Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium , consistent with t...

CVE-2026-79084

CVE-2026-79084 affects Google Chrome on Windows prior to version 152.0.7977.65 . The vulnerability resides in the Notifications component, where inadequate encryption strength allowed a remote attacker leveraging social engineering to bypass the web origin policy via a crafted HTML page. Chromium...

CVE-2026-78942

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in the Loader component. A remote attacker can exploit this via crafted network traffic to bypass the web origin policy . Chromium classifies the severity as Medium . No exploitation or exploit code has bee...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium rates the security severity as Medium . No exploitation details are provided in the available docume...

CVE-2026-79065

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Network component. The vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by delivering a crafted HTML page. Chromium rates this as Med...

CVE-2026-78987

CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , potentially leaking cross-origin data. Chromium rates the severity as Medium . Remediation is to upd...

CVE-2026-79046

This is a race condition in the Permissions component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit this flaw to bypass the web origin policy using a crafted HTML page. The Chromium security team rated the severity as Me...

CVE-2026-79237

CVE-2026-79237 is an incorrect authorization flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. The Chromium securi...

CVE-2026-78966

CVE-2026-78966 is an externally controlled reference vulnerability in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin data that should be restrict...