CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

An improper input validation vulnerability in the Media component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rated this as Medium severity, while NVD assigned a CVSS 3.1 scor...

CVE-2026-79185

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM (Document Object Model) of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page , potentially exposing sensitive data across origins. The CNA rates it Me...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79221

CVE-2026-79221 affects the Dawn component of Google Chrome prior to 152.0.7977.65 . The root cause is an uninitialized resource that a remote attacker can exploit by serving a crafted HTML page, potentially reading memory inside the browser's sandbox and leading to information disclosure . The CV...

CVE-2026-79075

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78901

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79203

CVE-2026-79203 is an improper input validation flaw in DevTools within Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to bypass site isolation , a security feature that ensures content from differen...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79249

A code injection vulnerability in the Bisection component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into processing a specially crafted file. The vulnerability requires user interaction and has no integrity or availability ...

CVE-2026-78951

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79269

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79068

CVE-2026-79068 is an improper resource exposure flaw in the StreamsAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The CVSS 3.1 score is 4.3 (Medium) with ...

CVE-2026-79134

An incorrect authorization flaw in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score 6.5 ) with high confidentiality im...

CVE-2026-79269

An uninitialized resource flaw in ANGLE , a component of Google Chrome, allows a remote attacker to potentially bypass the web origin policy by enticing a user to visit a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 and is rated Medium severity (CVSS 3.1: 4.3). Explo...