CVE-2026-79256

CVE-2026-79256 is a WebView vulnerability in Google Chrome on Android prior to 152.0.7977.65 . The root cause is an externally controlled reference that allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafte...

CVE-2026-78985

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78985

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78985

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in its FileSystem component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , potentially executing arbitrary code outside the browser's security sandbox...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-79109

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78945

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-78945

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79109

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78945

CVE-2026-78945 is a use-after-free vulnerability in the Views component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by luring a user into visiting a crafted HTML page through social engineering, potentially enabling arbitrary code execution outs...

CVE-2026-78999

An improper privilege management flaw in the Navigation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, who had already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. The NVD-as...

CVE-2026-79109

CVE-2026-79109 is an improper input validation flaw in the Printing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code . Chromium rates the severit...

CVE-2026-79286

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79286

CVE-2026-79286 is a missing authorization flaw in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 . A local attacker with a co-installed app can potentially execute arbitrary code outside the sandbox , escaping the intended security boundary of the browser. Chromium rates the severi...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is rated Medium by Chromium and scores 7.5 (High)...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...