30508 matches found
EUVD-2026-65807
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
A race condition exists in the Autofill component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to bypass web origin policies . This issue was addressed in the ChromeOS st...
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Google Chrome versions prior to 152.0.7977.65 are vulnerable to incorrect authorization in Extensions . A remote attacker who has compromised the renderer process can exploit this flaw by using a crafted HTML page to bypass the web origin policy and access a privileged page . This vulnerability h...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65801
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
Google Chrome versions prior to 152.0.7977.65 are vulnerable to CVE-2026-79118 , which involves an uninitialized resource within the ANGLE component. A remote attacker can exploit this via a crafted HTML page to obtain cross-origin data . While the initial Chromium severity is High , the CVSS3.1 ...
CVE-2026-79118
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65800
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-78908
A high-severity information leak in the Canvas component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass web origin policies using a crafted HTML page. This vulnerability is present in Chromium -based software, including distributions such as Astra Linux , De...
CVE-2026-78895
An information leak in Paint within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass web origin policies using a crafted HTML page. This vulnerability is classified with High security severity by Chromium. Remediation is available via updates; for example, Debian ...
CVE-2026-78895
Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-65796
Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...