288413 matches found
CVE-2026-78943
Improper input validation in the Editing component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to bypass the web origin policy . This vulnerability requires the attacker to have already compromised the renderer process and use social engineering to trick a user into n...
CVE-2026-78940
A vulnerability in the Network component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass web origin policies through a crafted HTML page. The issue is caused by improper initialization (CWE-665) and is rated as Medium severity. For Debian 12 bookworm , the vul...
EUVD-2026-65892
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79255
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65889
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79255
A medium-severity vulnerability in Google Chrome prior to version 152.0.7977.65 was identified due to improper input validation in WebRTC . A remote attacker who has already compromised the renderer process could leverage this flaw to bypass the web origin policy by serving a crafted HTML page. N...
CVE-2026-79248
A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This issue is rooted in incorrect authorization during input processing. Remediation involves updating th...
CVE-2026-79110
Google Chrome versions prior to 152.0.7977.65 are vulnerable to missing authorization in the Preload process. This flaw allows a remote attacker to bypass web origin policies by leveraging a crafted HTML page. This vulnerability affects the chromium package across various distributions, including...
EUVD-2026-65874
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79248
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79136
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65877
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79006
Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79084
Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65872
Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79116
Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65865
Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79192
Google Chrome (variations) prior to version 152.0.7977.65 is vulnerable to improper input validation. A remote attacker could potentially bypass web origin policy by sending crafted network traffic. This vulnerability is classified with Medium security severity. Remediation involves updating to v...
CVE-2026-78942
A vulnerability in the Loader component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass web origin policies via crafted network traffic due to incorrect reference resolution. This issue is categorized as Medium severity. Remediation for Debian 12 bookworm is ...