CVE-2026-79098

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79098

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79022

UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79022

CVE-2026-79022 is a UI misrepresentation vulnerability in the Transactions Platform component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that spoofs UI elements , potentially misleading users into taking unintended actions. The...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79206

CVE-2026-79206 is an out-of-bounds read in the FileSystem component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to read memory outside the sandbox via a crafted HTML page delivered through social engineering. Chromium rates the severity as Low ; CVSS 3.1 scores it 6.5 (Me...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-66035

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79206

Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79089

A race condition in the Transactions Platform of Google Chrome on Android (prior to version 152.0.7977.65 ) allows a remote attacker, leveraging social engineering and a crafted HTML page, to bypass system access restrictions and gain unauthorized access to sensitive system functions . The vulner...

CVE-2026-78897

A missing authorization flaw in the BrowserTag component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to obtain sensitive information via a crafted Chrome extension. Chromium rates the severity as Low , while the CVSS 3.1 base score is 6.5 (ME...

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79196

A race condition in the Editing feature of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering, to obtain sensitive information via a crafted HTML page. Chromium rates this as Low severity, with a CVSS 3.1 score of 5.3 (Medium) reflecting the high attack c...

EUVD-2026-66028

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78979

CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker leveraging social engineering can bypass the web origin policy via a crafted HTML page, potentially gaining unauthorized access to sensitive information or actio...

CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...