95570 matches found
CVE-2026-79258
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79265
CVE-2026-79265 is an incomplete cleanup vulnerability in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage social engineering and a crafted HTML page to obtain sensitive information . Chromium rat...
CVE-2026-79220
Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78951
A use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. Chromium classifies the severity as Medium , while the NVD/CNA-assigned C...
CVE-2026-79134
Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79068
CVE-2026-79068 is an improper resource exposure flaw in the StreamsAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The CVSS 3.1 score is 4.3 (Medium) with ...
CVE-2026-79068
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78978
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79205
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78903
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78959
Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78959
Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79283
CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could spoof UI elements by serving a crafted HTML page, potentially deceiving users. The flaw carries a Chromium severity of Medium with a CVSS 3.1 ...
CVE-2026-79291
CVE-2026-79291 is an information leak in the CSS engine of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , with no privileges required but user interaction necessary. The flaw is rated Medium (CVSS 3.1 bas...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79193
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79242
Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79180
CVE-2026-79180 is a UI misrepresentation vulnerability in the CustomTabs feature of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can leverage social engineering by serving a crafted HTML page to spoof UI elements, potentially deceiving users into interacting with ma...