CVE-2026-79269

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79269

An uninitialized resource flaw in ANGLE , a component of Google Chrome, allows a remote attacker to potentially bypass the web origin policy by enticing a user to visit a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 and is rated Medium severity (CVSS 3.1: 4.3). Explo...

CVE-2026-79134

An incorrect authorization flaw in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score 6.5 ) with high confidentiality im...

CVE-2026-79245

CVE-2026-79245 is a use-after-free vulnerability in the UI component of Google Chrome , affecting versions prior to 152.0.7977.65 . The flaw allows a local attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox via a local program. The CVSS v3.1 sc...

CVE-2026-78978

CVE-2026-78978 is an out-of-bounds read in ANGLE , a rendering component within Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution out...

CVE-2026-78983

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79205

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79205

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79234

CVE-2026-79234 is a CSS injection vulnerability in Google Chrome prior to version 152.0.7977.65 , rated Medium severity (CVSS 6.5). A remote attacker can obtain sensitive information by enticing a user to visit a specially crafted HTML page. The attack requires user interaction (visiting the page...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79070

Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79070

CVE-2026-79070 is a Medium -severity vulnerability in Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution in the browser's Cache component allows a remote attacker to bypass the web origin policy by convincing a user to visit a crafted HTML page, potentially leading t...

CVE-2026-78892

An incorrect authorization flaw in the Chromoting component of Google Chrome on Windows prior to 152.0.7977.65 allows a local attacker to bypass system access restrictions by executing a local program. The Chromium security severity is Medium , while NVD assigns CVSS 3.1: 7.1 (HIGH) with a local ...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-78949

CVE-2026-78949 affects the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . The root cause is an observable discrepancy in CustomTabs that allows a local attacker to obtain cross-origin data by exploiting a co-installed application. The impact is limited to unauthorized i...

CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79291

CVE-2026-79291 is an information leak in the CSS engine of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , with no privileges required but user interaction necessary. The flaw is rated Medium (CVSS 3.1 bas...

CVE-2026-79146

An information leak in CustomTabs in Google Chrome for Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed application. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, no privileges required, user interaction required, and a high i...