CVE-2026-79089

A race condition in the Transactions Platform of Google Chrome on Android (prior to version 152.0.7977.65 ) allows a remote attacker, leveraging social engineering and a crafted HTML page, to bypass system access restrictions and gain unauthorized access to sensitive system functions . The vulner...

CVE-2026-79082

CVE-2026-79082 is an incorrect authorization flaw in the Transactions Platform component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this by serving a crafted HTML page to bypass the web origin polic...

CVE-2026-79082

Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79082

Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-81677

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in the Transactions Platform allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a use...

PT-2026-81620

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the Transactions Platform allows a remote attacker to potentially spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations...

PT-2026-81670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Transactions Platform allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The w...