CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78907

An incorrect authorization flaw in the WebProtect component of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to leak sensitive information by enticing a user to visit a crafted HTML page. The Chromium security team rated this Medium severity; CVSS 3.1 scores it 6.5 (ne...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome (Chromium) prior to 152.0.7977.65 , allowing a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rates this as Medium severity, while...

CVE-2026-78907

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78969

CVE-2026-78969 is an uninitialized resource vulnerability in the Video component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can read memory inside the browser sandbox by luring a user to a crafted HTML page, resulting in high confidentiality impact (CVSS 6.5, Medium; CISA...

CVE-2026-79087

An injection vulnerability in Chrome Tabs affected Google Chrome prior to 152.0.7977.65 and Microsoft Edge (Chromium-based) . A remote attacker could potentially bypass system access restrictions by serving a crafted HTML page that a user must interact with. The vulnerability is rated Medium (CVS...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79031

Improper resource exposure in the Preload component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Site isolation is a security feature designed to protect against data theft and malicious code execution between websites. The vu...

CVE-2026-79110

CVE-2026-79110 is a missing authorization vulnerability in the Preload component of Google Chrome (prior to version 152.0.7977.65 ). A remote attacker can bypass the web origin policy by tricking a user into opening a specially crafted HTML page, potentially leading to unauthorized access to sens...

CVE-2026-79136

CVE-2026-79136 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 , rated Medium by Chromium (CVSS 3.1: 4.3, requiring user interaction). A remote attacker can bypass the web origin policy by luring a user into visiting a crafted HTML page. T...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

CVE-2026-79095 is an information leak in the Payments component of Google Chrome prior to version 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by luring a user into visiting a crafted HTML page . The CVSS 3.1 score is 4.3 (Medium) with required user interaction. The fix ...

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79140

A use-after-free vulnerability in Views in Google Chrome on Mac (versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The Chromium project rates the severity as Medium , while the CNA-assigned CVS...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

CVE-2026-79192 is an improper input validation flaw in the Variations component of Google Chrome prior to 152.0.7977.65 . A remote attacker can send specially crafted network traffic to potentially bypass the web origin policy , which may enable unauthorized access or actions across different web...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

Skia , the rendering library used by Google Chrome , is affected by an information leak that allows a remote attacker to obtain cross-origin data via a crafted HTML page. The vulnerability affects Chrome versions prior to 152.0.7977.65 and is rated Medium severity (CVSS 4.3, network vector, low c...