95133 matches found
CVE-2026-79199
CVE-2026-79199 is an incorrect authorization flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit the vulnerability by delivering a crafted HTML page to a victim, enabling the bypass of system access restrictions. Chromium classifies the se...
CVE-2026-79074
CVE-2026-79074 is an information leak in the Network component of Google Chrome prior to 152.0.7977.65 . The vulnerability allows a remote attacker who has already compromised the renderer process to obtain sensitive information via a crafted HTML page . The Chromium security severity is rated Me...
CVE-2026-79213
An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The Chromium security team rated this Medium severity. The fix is a...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79038
Incorrect authorization in the WebProtect component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security team classified this as Medium severity. Users should upgrade to Chrome 152.0.7977.65 or later to re...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78940
CVE-2026-78940 is an improper initialization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium . Remediation is to ...
CVE-2026-78894
A race condition in the Payments component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.6...
CVE-2026-78910
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78910
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65887
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78907
CVE-2026-78907 is an incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the victim's browser. Chromium rates the severity as Medium . Reme...
CVE-2026-78891
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79136
An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by serving a crafted HTML page to the victim. The Chromium security team classified the severity as Medium . The fix is available in Chr...
CVE-2026-79095
This vulnerability is an information leak in the Payments component of Google Chrome prior to version 152.0.7977.65 , rated Medium severity by Chromium. A remote attacker can obtain cross-origin data by serving a crafted HTML page to the victim. The fix is available in Chrome 152.0.7977.65. No ex...
CVE-2026-79128
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78909
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79271
An information leak in the DOM component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to obtain sensitive information through a crafted HTML page . The Chromium security team rated this Medium severity. No exploitation details or in-the-wild a...