95571 matches found
CVE-2026-79237
An incorrect authorization flaw in the Navigation component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. According to Red Hat, this could lead to unauthorized access to sensitive info...
EUVD-2026-65852
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78898
CVE-2026-78898 is an incorrect authorization vulnerability in the Downloads component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could exploit a crafted HTML page to bypass system access restrictions . Chromium rates this as Medium severity. The f...
CVE-2026-79028
An observable discrepancy in the Network component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to obtain sensitive information via a crafted HTML page. The CVSS 3.1 score is 5.3 (Medium) , reflecting high attack complexity and required user interaction, with a high co...
CVE-2026-79028
Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78898
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79028
Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78941
CVE-2026-78941 is an information leak in the Core component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially exposing cross-orig...
CVE-2026-79032
CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...
CVE-2026-78966
Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79186
An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...
CVE-2026-78966
Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79088
An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...
CVE-2026-79104
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79044
A missing authorization flaw in the WebAppInstalls component of Google Chrome on Android (prior to 152.0.7977.65 ) allowed a remote attacker who had already compromised the renderer process to obtain sensitive information via a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score ...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78893
Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79030
CVE-2026-79030 is an information disclosure vulnerability in the Autofill component of Google Chrome prior to version 152.0.7977.65 . An observable discrepancy in Autofill allows a remote attacker to obtain sensitive user information by serving a crafted HTML page , requiring user interaction but...