214144 matches found
CVE-2026-79013
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79199
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79042
CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering can potentially bypass system access restrictions via a crafted HTML page, resulting in a low impact on integrity with no i...
CVE-2026-79208
CVE-2026-79208 is a missing authorization flaw in the HTTP2 protocol handling of Google Chrome prior to version 152.0.7977.65 . A remote attacker with no privileges required can craft specific network traffic to leak sensitive information , though the attack is rated high complexity and is not co...
CVE-2026-79251
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79122
CVE-2026-79122 is an information leak in the SignIn component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information via crafted network traffic , without requiring user interaction or prior authentication. The CVSS 3.1 score is 5.9 (Medium) with high impact ...
CVE-2026-79208
Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79251
CVE-2026-79251 is an improper input validation vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can potentially bypass web origin policy via a crafted HTML page, with a CVSS v3.1 score of 4.3 (Medium) requiring user interaction. The fix is include...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79259
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...
CVE-2026-79259
CVE-2026-79259 is an improper input validation flaw in the Safebrowsing component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by providing a crafted file , allowing them to bypass system access restrictions . The CVSS 3.1 score is 4.3 (Medium) , with the attack re...
CVE-2026-79213
An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android (prior to version 152.0.7977.65 ) allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability was rated Medium by Chromium and scored CVSS 4.3 ...
CVE-2026-79270
CVE-2026-79270 is an uninitialized resource vulnerability in ANGLE (the cross-platform graphics layer) within Google Chrome prior to 152.0.7977.65 . A remote attacker can read memory outside the browser's security sandbox by serving a crafted HTML page , resulting in an information disclosure. Ch...
CVE-2026-78940
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79086
CVE-2026-79086 is a missing authorization flaw in the CustomTabs component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker, through a co-installed application , can obtain sensitive user information , resulting in unauthorized data disclosure. Chromium r...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79120
CVE-2026-79120 is an uninitialized resource vulnerability in ANGLE , a graphics rendering component used by Google Chrome and Chromium-based Microsoft Edge . In Chrome versions prior to 152.0.7977.65 , a remote attacker can potentially obtain cross-origin data by enticing a user to visit a crafte...
CVE-2026-79038
An incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. The attack requires user interaction but no prior access, with a CVS...