CVE-2026-78959

Google Chrome prior to 152.0.7977.65 contains a vulnerability in the FileSystem component caused by improper handling of case sensitivity . A remote attacker, leveraging social engineering , can bypass system access restrictions by delivering a crafted HTML page. The Chromium security severity is...

CVE-2026-78892

CVE-2026-78892 is an incorrect authorization vulnerability in Chromoting , a component of Google Chrome on Windows . Affected versions are prior to 152.0.7977.65 . A local attacker can exploit this flaw to bypass system access restrictions through a local program, potentially elevating privileges...

CVE-2026-79099

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...

CVE-2026-79276

CVE-2026-79276 is an improper privilege management flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions. The Chromium project rates the severity as Mediu...

CVE-2026-79094

CVE-2026-79094 is a race condition in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass system access restrictions . Chromium assigned it a Medium security severity. The fix is available in ...

CVE-2026-79151

An improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Rated Medium severity by Chromium, the flaw enables remote exploitation, though specific user...

CVE-2026-79050

CVE-2026-79050 is an Incorrect Authorization vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to bypass system access restrictions. Chromium rates the severity as Medium . No public exploitation or...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in BFCache (Back/Forward Cache) in Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could craft an HTML page to bypass system access restrictions . Chromium rates the severity as Medium . The fix shi...

CVE-2026-79143

Incorrect authorization in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker , leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated Medium . The fix is included in Chrome 152....

CVE-2026-79217

CVE-2026-79217 is an incorrect authorization vulnerability in Google Chrome for iOS , affecting versions prior to 152.0.7977.65 . The flaw resides in the Mobile component and allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. Chromium assigned a Medium ...

CVE-2026-79201

CVE-2026-79201 is an improper access control vulnerability in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page, enabling a bypass of the web origin policy . Chromium rates the security severity as Medium...

CVE-2026-79201

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79049

CVE-2026-79049 is a medium-severity vulnerability in Google Chrome's Passwords component, caused by an incorrect reference resolution that allowed a remote attacker to bypass system access restrictions via a crafted file. The flaw affected Chrome versions prior to 152.0.7977.65 , where a fix was ...

CVE-2026-79199

CVE-2026-79199 is an incorrect authorization flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit the vulnerability by delivering a crafted HTML page to a victim, enabling the bypass of system access restrictions. Chromium classifies the se...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could exploit the issue through a crafted HTML page to potentially bypass system access restrictions...

CVE-2026-79226

Google Chrome prior to 152.0.7977.65 is affected by an improper privilege management flaw in the Regional Capabilities component. A remote attacker leveraging social engineering can exploit this through a crafted Chrome extension to bypass system access restrictions . Chromium rates the severity ...

CVE-2026-79067

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. The attac...

CVE-2026-79213

An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The Chromium security team rated this Medium severity. The fix is a...

CVE-2026-79259

CVE-2026-79259 is an improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this flaw via a crafted file to bypass system access restrictions . Chromium rates the severity as Medium . The fix is available in ...

CVE-2026-79087

An injection vulnerability in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. The Chromium project assigned a severity of Medium . Updating to version 152.0.7977.65 or later is the indicated re...