CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

CVE-2026-79033 affects Google Chrome DevTools prior to version 152.0.7977.65 , caused by insufficient control flow management . A remote attacker leveraging social engineering can potentially execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is rate...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78901

A race condition in the V8 JavaScript engine in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. The Chromium project rates the vulnerability as Medium severity, while the CVSS 3.1 score is ...

CVE-2026-78901

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78913

A use-after-free vulnerability in the Chromoting component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates the severity as Medium , while NVD assigns a CVSS 3.1 base score of ...

CVE-2026-78951

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79091

CVE-2026-79091 is a use-after-free vulnerability in the Bluetooth component of Google Chrome on macOS , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (...

CVE-2026-79230

Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79230

CVE-2026-79230 is an improper input validation flaw in ANGLE , the OpenGL wrapping component of Google Chrome on macOS , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , potentially executing arbitrary code outside the ...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79083

CVE-2026-79083 is an improper enforcement of behavioral workflow in the Media component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially execute arbitrary code outside the browser's security san...

CVE-2026-78983

Use after free in the Views component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium security severity is rated Medium , while the NVD CVSS 3.1 s...

CVE-2026-79083

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78944

A use after free vulnerability in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension. The vulnerability is classified by Chromium as Medium severity but carries a CV...

CVE-2026-78983

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...