CVE-2026-79060

CVE-2026-79060 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy , potentially gainin...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-78946

CVE-2026-78946 is an incorrect authorization vulnerability in the Select component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage this flaw via a crafted HTML page to bypass the web origin policy , potentially allowing cross-origin data access that would normally be bl...

CVE-2026-79123

Google Chrome on Windows , prior to version 152.0.7977.65 , contains an improper input validation flaw in the NTP Footer component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass the web origin policy . Chromium rated the secu...

CVE-2026-79005

CVE-2026-79005 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this by serving a crafted HTML page to bypass the web origin policy . The Chromium securit...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79243

CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium a...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79190

CVE-2026-79190 is an incorrect authorization flaw in the Extensions component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium assigned this a Low security...

EUVD-2026-66028

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-78979

CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . The flaw allowed a remote attacker, leveraging social engineering, to bypass web origin policy via a crafted HTML page. Chromium assigned a Low security severity. No ...

CVE-2026-79000

CVE-2026-79000 is a low-severity improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can craft network traffic to bypass the web origin policy . The Chromium project classifies the se...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79141

Google Chrome prior to 152.0.7977.65 contained an incorrect authorization flaw in the Browser component. A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy . Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.65 ...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass the web origin policy , potentially exposing data that should be isolated between origins. Chromium rates the severity as...

CVE-2026-79085

CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin resources that...

CVE-2026-79068

Google Chrome prior to 152.0.7977.65 is affected by an improper resource exposure in the StreamsAPI component. A remote attacker can potentially bypass the web origin policy into a privileged page by delivering a crafted HTML page. Chromium rates this as Medium severity. Remediation is to update ...

CVE-2026-79269

CVE-2026-79269 is an uninitialized resource vulnerability in ANGLE , a component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to potentially bypass the web origin policy . Chromium rates the severity as Medium . The fix is available in Chr...

CVE-2026-79178

CVE-2026-79178 is an incorrect authorization flaw in Web Authentication (Passkeys & Security Keys) within Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorized access to WebAuthn credentia...