CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

CVE-2026-79044

Google Chrome on Android prior to 152.0.7977.65 is affected by a missing authorization flaw in the WebAppInstalls component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information. The Chromium security severity ...

CVE-2026-79030

An observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page. The vulnerability was rated Medium severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65 or later. No...

CVE-2026-78893

An information leak vulnerability exists in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw via a crafted HTML page to exfiltrate sensitive information from the browser. Chromium classifies the security severity as Medium . The fix is a...

CVE-2026-79274

CVE-2026-79274 is an information leak in the GPU component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by serving a crafted HTML page. Chromium assigns this vulnerability a severity of High . The fix is included in Chrome 152.0.7977.65 , releas...

CVE-2026-79131

An out-of-bounds write in ANGLE (the graphics rendering layer) in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by luring a victim into loading a crafted HTML page. Chromium rates this vulnerability High severity. The fix is included i...

CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79198

CVE-2026-79198 is a use-after-free vulnerability in the Platform component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw by delivering a crafted HTML page , leading to arbitrary code execution inside the Chrome sandbox . Chromium rates the security se...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a component within Google Chrome prior to version 152.0.7977.65 . The flaw allowed a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into opening a crafted HTML page. Chromium classifies the security se...

CVE-2026-79188

CVE-2026-79188 is an out-of-bounds write in ANGLE (the cross-platform graphics library) within Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the Chromium sandbox by serving a crafted HTML page to a victim. Chromium rates the severi...

CVE-2026-79174

Incorrect authorization in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy into a privileged page via a crafted HTML page. Chromium rated the severity as High . The fix is a...

CVE-2026-79111

CVE-2026-79111 is an improper input validation vulnerability in the Dawn component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. Chromium classifies the se...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by luring a user into opening a crafted HTML page . Chromium rated the severity High . The fix is available in the st...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to a user, potentially obtaining sensitive information . The issue was rated High severity by the Ch...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in WebRTC within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , leading to arbitrary code execution inside the sandbox . Chromium rates the severity as High . The f...

CVE-2026-79202

CVE-2026-79202 is a use after free vulnerability in Chromecast within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium assigns it a High severity rating. The fix is availa...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

CVE-2026-79195 is a use-after-free vulnerability in the Script component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The Chromium project assigned this a High severity rating...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...