CVE-2026-79118

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79118

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79174

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65796

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78908

A high-severity information leak in the Canvas component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass web origin policies using a crafted HTML page. This vulnerability is present in Chromium -based software, including distributions such as Astra Linux , De...

CVE-2026-78895

An information leak in Paint within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass web origin policies using a crafted HTML page. This vulnerability is classified with High security severity by Chromium. Remediation is available via updates; for example, Debian ...

CVE-2026-78908

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78895

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78895

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78908

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65795

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78895

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78908

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79082

Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78965

A vulnerability in the ANGLE component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to perform a cross-origin data leakage via an uninitialized resource . This is triggered by visiting a crafted HTML page. While specific exploit links are not provided, the vulnerabil...

CVE-2026-79117

A race condition in WebAppInstalls within Google Chrome on Android (prior to version 152.0.7977.65) allows a remote attacker to bypass the web origin policy via a co-installed app, leveraging social engineering. This vulnerability is classified as High severity by Chromium security. Affected chro...

CVE-2026-79082

A vulnerability in the Transactions Platform of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to bypass the web origin policy via a crafted HTML page. This issue is caused by incorrect authorization within the platform. Impacted s...

CVE-2026-79117

Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: High...

CVE-2026-78965

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79082

Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...