288396 matches found
CVE-2026-79141
A vulnerability exists in the Browser component of Google Chrome (prior to version 152.0.7977.65 ). This Incorrect authorization flaw allows a remote attacker to bypass the web origin policy by utilizing a crafted HTML page. The issue is rated as Medium severity. Remediation is available in versi...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-66013
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79085
A missing authorization vulnerability in the Network section of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to bypass web origin policies via a crafted HTML page. This vulnerability has a Medium security severity. Remediation in...
CVE-2026-79269
Google Chrome experienced a web origin policy bypass vulnerability due to an uninitialized resource in the ANGLE component. This flaw existed in versions prior to 152.0.7977.65 and could be triggered by a remote attacker through a crafted HTML page . While the initial description identifies the i...
CVE-2026-79085
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79085
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65984
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Google Chrome versions prior to 152.0.7977.65 are vulnerable to an incorrect authorization flaw in Web Authentication (Passkeys & Security Keys) . A remote attacker can exploit this by using a crafted HTML page to bypass the web origin policy . This issue is assigned a Medium security severity by...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65976
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79238
A vulnerability exists in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65 ) due to incorrect authorization . This flaw allows a remote attacker to bypass the web origin policy by leveraging social engineering and a crafted Chrome extension . The Chromium security seve...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-65925
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
A vulnerability in the Loader component of Google Chrome (prior to version 152.0.7977.65) involves incorrect authorization , which may allow a remote attacker to bypass web origin policies via a crafted HTML page. This issue has been addressed in various distributions, including a fix for Debian ...