CVE-2026-79008

A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...

CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-79010

A flaw was found in Google Chrome's Network component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by performing an operation on a resource after it had expired or been released. This could be triggered via a crafted HTML page, allowing th...

CVE-2026-78954

A flaw was found in Google Chrome's Extensions. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved through a crafted HTML page, potentially leading to unauthorized access or...

CVE-2026-78961

A flaw was found in Google Chrome's core functionality. A remote attacker, who has already compromised a part of the browser responsible for rendering web content the renderer process and used social engineering tactics, could bypass the security mechanism that isolates content from different...

CVE-2026-78939

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513261751...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

CVE-2026-79228

A flaw was found in Google Chrome. An incorrect authorization vulnerability within the Site Isolation feature allows a remote attacker, who has compromised the renderer process, to bypass site isolation. This can be achieved by a crafted HTML page, leading to unauthorized access to privileged pag...

CVE-2026-79224

A flaw was found in Chromecast within the Chromium browser. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing the victim to visit a specially crafted HTML...

CVE-2026-79218

An incorrect authorization flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500311587...

CVE-2026-79191

An incorrect authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517606780...

CVE-2026-79175

A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79174

A flaw was found in Extensions in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. By crafting a malicious HTML page, the attacker can gain unauthorized access to privileged pages...

CVE-2026-79155

A race condition flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522294538...

CVE-2026-79139

A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...

CVE-2026-79121

A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...

CVE-2026-79103

A flaw was found in Google Chrome's Speech component. This vulnerability involves incorrect reference resolution, which a remote attacker can exploit to bypass site isolation. The attacker needs to have compromised the renderer process and then trick a user into visiting a specially crafted HTML...

CVE-2026-79116

A flaw was found in Viz in Google Chrome. Missing authorization allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized...

CVE-2026-78894

A race condition flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505991181...

CVE-2026-76019

A flaw was found in chromium-browser. Incorrect authorization in the Workers component allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into interacting with a specially...