CVE-2026-79218

CVE-2026-79218 is an incorrect authorization flaw in the Sandbox component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by delive...

CVE-2026-79218

Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79175

Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79175

CVE-2026-79175 is a type confusion vulnerability in the Accessibility component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to achieve arbitrary code exec...

CVE-2026-78939

CVE-2026-78939 is a use after free vulnerability in Chromecast within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can trigger the flaw via a crafted HTML page , leading to arbitrary code execution outside the sandb...

EUVD-2026-65766

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79175

Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78935

CVE-2026-78935 is a critical use-of-uninitialized-variable vulnerability in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the browser sandbox by convincing a user to load a crafted HTML...

CVE-2026-78989

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79150

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65970

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79200

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79150

CVE-2026-79150 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-05...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

A use after free vulnerability in the Aura component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The bug was internally reported by Google on 2026-05-25 (Chromium bug 5164...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79224

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...