CVE-2026-78978

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

Google Chrome prior to 152.0.7977.65 contains a vulnerability in the FileSystem component caused by improper handling of case sensitivity . A remote attacker, leveraging social engineering , can bypass system access restrictions by delivering a crafted HTML page. The Chromium security severity is...

CVE-2026-79283

CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page to spoof UI elements , potentially tricking users into interacting with deceptive content. Chromium ...

CVE-2026-79291

CVE-2026-79291 is an information leak in the CSS component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could obtain sensitive information by convincing a user to open a crafted HTML page . The Chromium security team classified this as Medium severity. No exploitation or in...

CVE-2026-79291

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79180

CVE-2026-79180 is a UI misrepresentation vulnerability in the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering could spoof UI elements via a crafted HTML page, potentially misleading users into interacting with fake interfac...

CVE-2026-79023

Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79293

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79293

CVE-2026-79293 is an information leak in the Animation component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to obtain sensitive information. Chromium rates the severity as Medium . The fix is available in Chrome 152.0.7977.65, released via...

CVE-2026-79024

CVE-2026-79024 is an information leak in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by tricking a user into loading a crafted HTML page. Chromium assigns a Medium security severity to this issue. The fix is avai...

CVE-2026-79024

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79173

Google Chrome prior to 152.0.7977.65 contained a UI misrepresentation vulnerability in the WebAppInstalls component. A remote attacker could exploit this by serving a crafted HTML page to spoof UI elements, rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65 , released...

CVE-2026-78975

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

CVE-2026-78975 is an incorrect authorization vulnerability in the DOM component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from the victim. Chromium classifies the severity as Medium . The fix is a...

EUVD-2026-65938

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65926

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79228

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79228

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79228

An incorrect authorization flaw in the SiteIsolation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation and reach a privileged page via a crafted HTML page. The Chromium project rates the severity a...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in BFCache (Back/Forward Cache) in Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could craft an HTML page to bypass system access restrictions . Chromium rates the severity as Medium . The fix shi...