990197 matches found
CVE-2026-79246
Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78947
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-79246
CVE-2026-79246 is an information leak in the DataTransfer component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can craft an HTML page that, when visited by a user, discloses sensitive information. The vulnerability requires user interaction (visiting the craf...
CVE-2026-79056
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79015
Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79015
Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79239
Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79018
CVE-2026-79018 is an information leak in the FoldableAPIs component of Google Chrome (desktop), affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by serving a crafted HTML page that, when opened by a victim, leaks sensitive information. The attack require...
CVE-2026-79056
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79018
Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79018
Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79056
A use-after-free flaw in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The CVSS 3.1 score is 9.6 (Critical) with a changed scope, requiring user inte...
CVE-2026-78896
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78946
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79273
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66041
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79123
CVE-2026-79123 is an improper input validation flaw in the New Tab Page (NTP) Footer of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy by enticing a user to visit a crafted ...
CVE-2026-78977
An uninitialized resource in the GPU component of Google Chrome on Android (prior to 152.0.7977.65 ) allows a remote attacker to read memory inside the sandbox via a crafted HTML page, resulting in information disclosure . The Chromium team rates the severity as Low , while NVD assigns a CVSS 3.1...
CVE-2026-78977
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...