214148 matches found
CVE-2026-78985
Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79237
An incorrect authorization flaw in the Navigation component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. According to Red Hat, this could lead to unauthorized access to sensitive info...
CVE-2026-78985
Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79028
Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79016
CVE-2026-79016 is an observable discrepancy in the SVG component of Google Chrome prior to version 152.0.7977.65 , allowing a remote attacker to obtain cross-origin data by persuading a user to visit a crafted HTML page . The CVSS 3.1 score is 4.3 (Medium) , with user interaction required and low...
CVE-2026-79016
Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78966
An externally controlled reference in the QUIC protocol within Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. Red Hat notes the bypass could lead to unauthorized access to sensitive data or actions wit...
CVE-2026-79016
Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79286
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...
CVE-2026-78966
Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79262
CVE-2026-79262 is an incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by serving a crafted HTML page, potentially allowing access to restricted resources or data from other origins and leading to inf...
CVE-2026-79262
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65838
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79076
CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by sending crafted network traffic to obtain sensitive information, with no privileges required but user interac...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79222
An incorrect authorization flaw in CustomTabs within Google Chrome on Android (prior to 152.0.7977.65 ) allows a local attacker, through a co-installed application, to bypass the web origin policy . Red Hat notes this could lead to unauthorized access to sensitive information or actions within th...
CVE-2026-78893
CVE-2026-78893 is an information disclosure vulnerability in the QUIC (Quick UDP Internet Connections) implementation of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit the flaw by enticing a user to visit a crafted HTML page , leading to the leakage of sensitive info...