CVE-2026-78940

Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79057

A race condition in the Start component of Google Chrome on Android (prior to version 152.0.7977.65 ) allows a local attacker, leveraging social engineering and a co-installed application , to potentially execute arbitrary code outside the browser's security sandbox. Successful exploitation could...

CVE-2026-79264

CVE-2026-79264 is a medium-severity vulnerability in Google Chrome prior to 152.0.7977.65 , caused by incorrect reference resolution in the Preload component . A remote attacker can bypass the web origin policy by serving a crafted HTML page, potentially allowing access to sensitive information a...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65882

Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79137

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78907

An incorrect authorization flaw in the WebProtect component of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to leak sensitive information by enticing a user to visit a crafted HTML page. The Chromium security team rated this Medium severity; CVSS 3.1 scores it 6.5 (ne...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome (Chromium) prior to 152.0.7977.65 , allowing a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rates this as Medium severity, while...

CVE-2026-78907

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78969

CVE-2026-78969 is an uninitialized resource vulnerability in the Video component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can read memory inside the browser sandbox by luring a user to a crafted HTML page, resulting in high confidentiality impact (CVSS 6.5, Medium; CISA...

CVE-2026-79087

An injection vulnerability in Chrome Tabs affected Google Chrome prior to 152.0.7977.65 and Microsoft Edge (Chromium-based) . A remote attacker could potentially bypass system access restrictions by serving a crafted HTML page that a user must interact with. The vulnerability is rated Medium (CVS...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79031

Improper resource exposure in the Preload component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Site isolation is a security feature designed to protect against data theft and malicious code execution between websites. The vu...