CVE-2026-78946

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could craft an HTML page to bypass system access restrictions . Google classifies this as Chromium severity: Low , yet the CNA...

CVE-2026-78946

An incorrect authorization vulnerability in the Select component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. Per Red Hat, this could lead to unauthorized access to sensitive information or actions across differ...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

An observable discrepancy in Glic within Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The flaw requires user interaction and has a high attack complexity , reflected in the CVSS 3.1 base score of 5.3 (Medium) with no impac...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79124

CVE-2026-79124 is an information leak in the Intents component of Google Chrome on Android (prior to 152.0.7977.65 ). A remote attacker can exploit it via a crafted HTML page to leak sensitive information. Chromium rates the severity as Low , while CVSS 3.1 scores it 6.5 (MEDIUM) with a network v...

CVE-2026-79124

Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79001

CVE-2026-79001 is an information leak in the Bluetooth component of Google Chrome on Mac , fixed in version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information via a crafted HTML page. Chromium rates ...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass the web origin policy , potentially exposing data that should be isolated between origins. Chromium rates the severity as...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79221

An uninitialized resource in Dawn (the GPU backend for the Chromium rendering pipeline) in Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. The vulnerability is rated Medium severity by Chromium. Remediati...

EUVD-2026-66007

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...