EUVD-2026-65872

Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65869

Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65871

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79116

A missing authorization vulnerability exists in Viz within Google Chrome versions prior to 152.0.7977.65 . A remote attacker who has successfully compromised the renderer process can bypass the web origin policy by using a crafted HTML page. Impact is classified as Medium severity. Remediation in...

CVE-2026-79095

An information leak in the Payments component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to obtain cross-origin data by navigating the user to a crafted HTML page. This vulnerability has a Medium security severity. Remediation involves updating the Chromium packag...

CVE-2026-79006

A protection mechanism failure in the HttpsUpgrades component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass web origin policies using crafted network traffic. This vulnerability could lead to unauthorized access or manipulation of data by circumventing secur...

CVE-2026-79084

Google Chrome on Windows (prior to version 152.0.7977.65 ) is vulnerable to inadequate encryption strength within the Notifications component. A remote attacker could leverage social engineering and a crafted HTML page to bypass the web origin policy . The impact is classified as Medium severity,...

EUVD-2026-65865

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-65868

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Google Chrome (variations) prior to version 152.0.7977.65 is vulnerable to improper input validation. A remote attacker could potentially bypass web origin policy by sending crafted network traffic. This vulnerability is classified with Medium security severity. Remediation involves updating to v...

CVE-2026-78942

A vulnerability in the Loader component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass web origin policies via crafted network traffic due to incorrect reference resolution. This issue is categorized as Medium severity. Remediation for Debian 12 bookworm is ...

CVE-2026-79065

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79065

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...