29809 matches found
CVE-2026-79272
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65933
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-78936
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79214
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79214
The Chromium browser (and various distributions including Debian , Astra Linux , and openSUSE ) is vulnerable to a Medium severity security issue (CVE-2026-79214 ) due to improper input validation in the Preload feature. A remote attacker who has already compromised the renderer process can explo...
CVE-2026-79214
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65925
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79214
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
A vulnerability in Google Chrome (specifically the chromium package) allows a remote attacker to potentially obtain cross-origin data via a crafted HTML page. The root cause is an observable discrepancy in PerformanceAPIs affecting versions prior to 152.0.7977.65 . Impact of this flaw is categori...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65921
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79201
A security vulnerability exists in Google Chrome (prior to version 152.0.7977.65 ) due to improper access control in Workers . A remote attacker can exploit this flaw by leveraging a crafted HTML page to bypass the web origin policy . Impact is categorized as Medium (Chromium security severity) w...
CVE-2026-79051
A vulnerability in the Loader component of Google Chrome (prior to version 152.0.7977.65) involves incorrect authorization , which may allow a remote attacker to bypass web origin policies via a crafted HTML page. This issue has been addressed in various distributions, including a fix for Debian ...
CVE-2026-79285
A Use of Uninitialized Resource vulnerability in the ANGLE component of Google Chrome on Windows (prior to version 152.0.7977.65 ) allows a remote attacker to obtain cross-origin data via a crafted HTML page. While specific exploit links are not provided, the vulnerability is associated with a Me...
EUVD-2026-65914
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...