CVE-2026-78953

CVE-2026-78953 is a missing authorization vulnerability in SiteIsolation within Google Chrome versions prior to 152.0.7977.65 . A remote attacker who has compromised the renderer process can bypass site isolation by using a crafted PDF file . This vulnerability is categorized with a Medium securi...

CVE-2026-79002

A vulnerability in Google Chrome (and Chromium ) prior to version 152.0.7977.65 allows a remote attacker who has compromised the renderer process to bypass site isolation . This is possible by using a crafted HTML page due to an incorrect authorization flaw within the SiteIsolation component. Imp...

CVE-2026-79229

An uninitialized resource in the ANGLE component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. This vulnerability (CWE-908) has a Medium severity and a CVSS 3.1 base s...

CVE-2026-79214

The Chromium browser (and various distributions including Debian , Astra Linux , and openSUSE ) is vulnerable to a Medium severity security issue (CVE-2026-79214 ) due to improper input validation in the Preload feature. A remote attacker who has already compromised the renderer process can explo...

CVE-2026-79228

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) was caused by incorrect authorization in SiteIsolation . This flaw allowed a remote attacker who had compromised the renderer process to bypass site isolation and access a privileged page through a crafted HTML page. The issue has...

CVE-2026-79229

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65924

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

A missing authorization vulnerability exists in the BFCache component of Google Chrome (prior to version 152.0.7977.65). A remote attacker who has successfully compromised the renderer process can exploit this flaw to bypass system access restrictions by using a crafted HTML page . The security s...

CVE-2026-79132

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65910

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79132

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65913

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79132

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

A missing authorization vulnerability in Lighthouse within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass site isolation . This attack requires the attacker to have already compromised the renderer process and utilize social engineering to lead the user to a cra...

CVE-2026-79132

A remote attacker who has compromised the renderer process in Google Chrome on Android (prior to version 152.0.7977.65) can execute arbitrary code outside the sandbox. This is due to improper input validation in the Input component, which can be triggered via a crafted HTML page. The Chromium sec...

CVE-2026-79074

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...