CVE-2026-79093

Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79212

CVE-2026-79212 is a missing authorization flaw in the Passwords component of Google Chrome prior to 152.0.7977.65 (Windows, Mac, Linux). A remote attacker who had already compromised the browser's renderer process could leverage social engineering to bypass the web origin policy via a crafted HTM...

CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-81782

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in CustomTabs allows a local attacker to bypass the web origin policy through a co-installed application. The web origin policy is a security mechanis...

PT-2026-81565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

PT-2026-81730

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in CustomTabs allows a local attacker to bypass the web origin policy through a co-installed application. The web origin policy is a security mechanis...

PT-2026-81572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Core component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and use...

PT-2026-81697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in WebAppInstalls allows a remote attacker to bypass the web origin policy through a co-installed application. This exploitation requires the use of social...

CVE-2026-79174: Incorrect Authorization

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-79243: Improper Input Validation

Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79222: Incorrect Authorization

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

PT-2026-81720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one...

PT-2026-81559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in Chromium allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-81715

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the ServiceWorker allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. The web origin policy is a security mechani...

PT-2026-81577

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An externally controlled reference in the QUIC protocol allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. QUIC is a transport layer networ...

PT-2026-81750

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

PT-2026-81645

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Loader component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fr...

PT-2026-81680

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Paint allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from...

PT-2026-81552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper initialization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

PT-2026-81635

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description Missing authorization allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact wi...