CVE-2026-79084

CVE-2026-79084 affects Google Chrome on Windows prior to version 152.0.7977.65 . The vulnerability resides in the Notifications component, where inadequate encryption strength allowed a remote attacker leveraging social engineering to bypass the web origin policy via a crafted HTML page. Chromium...

CVE-2026-78942

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in the Loader component. A remote attacker can exploit this via crafted network traffic to bypass the web origin policy . Chromium classifies the severity as Medium . No exploitation or exploit code has bee...

CVE-2026-79192

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium rates the security severity as Medium . No exploitation details are provided in the available docume...

CVE-2026-79065

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Network component. The vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by delivering a crafted HTML page. Chromium rates this as Med...

CVE-2026-78987

CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , potentially leaking cross-origin data. Chromium rates the severity as Medium . Remediation is to upd...

CVE-2026-79046

This is a race condition in the Permissions component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit this flaw to bypass the web origin policy using a crafted HTML page. The Chromium security team rated the severity as Me...

CVE-2026-79237

CVE-2026-79237 is an incorrect authorization flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. The Chromium securi...

CVE-2026-79267

CVE-2026-79267 is a race condition in Workers affecting Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. Chromium rated the severity as Medium . The vulnerability is fixed i...

CVE-2026-78966

CVE-2026-78966 is an externally controlled reference vulnerability in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin data that should be restrict...

CVE-2026-79010

CVE-2026-79010 is a use-after-free type vulnerability (operation on a resource after expiration or release) in the Network component of Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could exploit this to bypass the web origin policy via a craf...

CVE-2026-79262

CVE-2026-79262 is an incorrect authorization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access to sens...

CVE-2026-79106

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Input component. A remote attacker who had already compromised the renderer process and leveraged social engineering could bypass the web origin policy using a crafted HTML page. The Chromium security tea...

CVE-2026-78961

CVE-2026-78961 is an incorrect authorization vulnerability in the Core component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can craft an HTML page that bypasses the web origin policy . The C...

CVE-2026-79222

CVE-2026-79222 is an incorrect authorization flaw in CustomTabs in Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker can leverage a co-installed app to bypass the web origin policy , potentially gaining unauthorized access to web content or data within Chrome...

CVE-2026-78954

Google Chrome versions prior to 152.0.7977.65 contain an incorrect authorization flaw in the Extensions component. An attacker who has already compromised the renderer process can exploit this to bypass web origin policy by serving a crafted HTML page. The Chromium project rates this as High seve...

CVE-2026-79014

A race condition in the Autofill component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy via a crafted HTML page. The Chromium security team rated this High severity. The primary impact is a secur...

CVE-2026-79174

Incorrect authorization in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy into a privileged page via a crafted HTML page. Chromium rated the severity as High . The fix is a...

CVE-2026-78895

CVE-2026-78895 is an information leak in the Paint component of Google Chrome prior to 152.0.7977.65 , classified as High severity by Chromium. A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially exposing data across origin boundaries. The fi...

CVE-2026-78908

CVE-2026-78908 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability by delivering a crafted HTML page , enabling a bypass of the web origin policy to leak information. Chromium rates the security severity as Hi...

CVE-2026-79082

CVE-2026-79082 is an incorrect authorization vulnerability in the Transactions Platform component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to bypass the web origi...