990224 matches found
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79068
CVE-2026-79068 is an improper resource exposure flaw in the StreamsAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The CVSS 3.1 score is 4.3 (Medium) with ...
CVE-2026-79068
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79003
Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79134
An incorrect authorization flaw in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score 6.5 ) with high confidentiality im...
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
An uninitialized resource flaw in ANGLE , a component of Google Chrome, allows a remote attacker to potentially bypass the web origin policy by enticing a user to visit a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 and is rated Medium severity (CVSS 3.1: 4.3). Explo...
CVE-2026-79230
Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78978
CVE-2026-78978 is an out-of-bounds read in ANGLE , a rendering component within Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution out...
CVE-2026-78983
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79234
CVE-2026-79234 is a CSS injection vulnerability in Google Chrome prior to version 152.0.7977.65 , rated Medium severity (CVSS 6.5). A remote attacker can obtain sensitive information by enticing a user to visit a specially crafted HTML page. The attack requires user interaction (visiting the page...
CVE-2026-79205
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79205
CVE-2026-79205 is an incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to open a crafted HTML page , potentially gaining unauthorized access to sensitive information or performing a...
CVE-2026-79205
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79234
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79070
CVE-2026-79070 is a Medium -severity vulnerability in Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution in the browser's Cache component allows a remote attacker to bypass the web origin policy by convincing a user to visit a crafted HTML page, potentially leading t...
CVE-2026-79070
Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...