CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79227

CVE-2026-79227 is a type confusion vulnerability in Google Chrome DevTools (versions prior to 152.0.7977.65 ). A remote attacker leveraging social engineering could deliver a crafted HTML page that executes arbitrary code inside the Chrome sandbox . The CVSS 3.1 score is 8.8 (High) , with a netwo...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

CVE-2026-78962 is an uninitialized resource vulnerability in the WebXR component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that potentially leaks cross-origin data , exposing confidential information from ...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, bypassing system access restrictions . The vulnerabili...

CVE-2026-79258

An incorrect authorization flaw in WebXR within Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to obtain cross-origin data . The CVSS 3.1 score is 6.5 (Medium) , with a high confidentiality impact but no integrity or availabi...

CVE-2026-79091

Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79091

CVE-2026-79091 is a use-after-free vulnerability in the Bluetooth component of Google Chrome on macOS , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

An incorrect authorization flaw in the Device component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Medium severity (CVSS 3.1: 4.3 , vector AV:N/AC:L/PR:N...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79154

Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. Chromium security severity: Medium...

CVE-2026-79154

Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. Chromium security severity: Medium...

CVE-2026-79154

CVE-2026-79154 is a missing authorization flaw in DevTools in Google Chrome prior to version 152.0.7977.65 . A remote attacker, by leveraging social engineering and user interface interaction , can obtain sensitive information. The CVSS 3.1 score is 6.5 (Medium) with a network attack vector and h...

CVE-2026-78944

A use after free vulnerability in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension. The vulnerability is classified by Chromium as Medium severity but carries a CV...