CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

An information leak in the DOM component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to obtain sensitive information through a crafted HTML page . The Chromium security team rated this Medium severity. No exploitation details or in-the-wild a...

EUVD-2026-65863

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , potentially leaking cross-origin data. Chromium rates the severity as Medium . Remediation is to upd...

CVE-2026-78898

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79237

CVE-2026-79237 is an incorrect authorization flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. The Chromium securi...

EUVD-2026-65852

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78898

CVE-2026-78898 is an incorrect authorization vulnerability in the Downloads component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could exploit a crafted HTML page to bypass system access restrictions . Chromium rates this as Medium severity. The f...

CVE-2026-79028

CVE-2026-79028 is an observable discrepancy in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page to the victim, enabling the attacker to obtain sensitive information . Chromium classifies the security...

CVE-2026-78898

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78941

CVE-2026-78941 is an information leak in the Core component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially exposing cross-orig...

CVE-2026-79032

CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...

CVE-2026-79044

Google Chrome on Android prior to 152.0.7977.65 is affected by a missing authorization flaw in the WebAppInstalls component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information. The Chromium security severity ...

EUVD-2026-65827

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78893

An information leak vulnerability exists in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw via a crafted HTML page to exfiltrate sensitive information from the browser. Chromium classifies the security severity as Medium . The fix is a...

CVE-2026-79030

An observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by delivering a crafted HTML page. The vulnerability was rated Medium severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65 or later. No...