CVE-2026-78941

CVE-2026-78941 is an information leak in the Core component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially exposing cross-orig...

CVE-2026-79032

CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

CVE-2026-79044

Google Chrome on Android prior to 152.0.7977.65 is affected by a missing authorization flaw in the WebAppInstalls component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information. The Chromium security severity ...

CVE-2026-79030

An observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page. The vulnerability was rated Medium severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65 or later. No...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65827

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78893

An information leak vulnerability exists in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw via a crafted HTML page to exfiltrate sensitive information from the browser. Chromium classifies the security severity as Medium . The fix is a...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79274

CVE-2026-79274 is an information leak in the GPU component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by serving a crafted HTML page. Chromium assigns this vulnerability a severity of High . The fix is included in Chrome 152.0.7977.65 , releas...

CVE-2026-79131

An out-of-bounds write in ANGLE (the graphics rendering layer) in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by luring a victim into loading a crafted HTML page. Chromium rates this vulnerability High severity. The fix is included i...

CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79198

CVE-2026-79198 is a use-after-free vulnerability in the Platform component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw by delivering a crafted HTML page , leading to arbitrary code execution inside the Chrome sandbox . Chromium rates the security se...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a component within Google Chrome prior to version 152.0.7977.65 . The flaw allowed a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into opening a crafted HTML page. Chromium classifies the security se...

CVE-2026-79188

CVE-2026-79188 is an out-of-bounds write in ANGLE (the cross-platform graphics library) within Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the Chromium sandbox by serving a crafted HTML page to a victim. Chromium rates the severi...

CVE-2026-79174

Incorrect authorization in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy into a privileged page via a crafted HTML page. Chromium rated the severity as High . The fix is a...

CVE-2026-79111

CVE-2026-79111 is an improper input validation vulnerability in the Dawn component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. Chromium classifies the se...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by luring a user into opening a crafted HTML page . Chromium rated the severity High . The fix is available in the st...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to a user, potentially obtaining sensitive information . The issue was rated High severity by the Ch...