29853 matches found
CVE-2026-78954
Google Chrome versions prior to 152.0.7977.65 are vulnerable to an incorrect authorization flaw in Extensions . A remote attacker who has compromised the renderer process can bypass the web origin policy using a crafted HTML page. This vulnerability is classified as High severity by Chromium. Rem...
CVE-2026-79274
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79274
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79274
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-78954
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65818
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-78954
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-78954
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65817
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
A race condition exists in the Autofill component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to bypass web origin policies . This issue was addressed in the ChromeOS st...
EUVD-2026-65807
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
Google Chrome versions prior to 152.0.7977.65 are vulnerable to CVE-2026-79118 , which involves an uninitialized resource within the ANGLE component. A remote attacker can exploit this via a crafted HTML page to obtain cross-origin data . While the initial Chromium severity is High , the CVSS3.1 ...
CVE-2026-79174
Google Chrome versions prior to 152.0.7977.65 are vulnerable to incorrect authorization in Extensions . A remote attacker who has compromised the renderer process can exploit this flaw by using a crafted HTML page to bypass the web origin policy and access a privileged page . This vulnerability h...
EUVD-2026-65801
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...