CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79048

CVE-2026-79048 is an out-of-bounds write in ANGLE , a graphics abstraction layer used in Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a crafted HTML page , potentially achieving arbitrary code execution insid...

CVE-2026-79174

CVE-2026-79174 is an incorrect authorization vulnerability in the Extensions component of Google Chrome prior to 152.0.7977.65 . The flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy and gain unauthorized access to a privileged page via...

CVE-2026-79118

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79232

CVE-2026-79232 is a use-after-free vulnerability in the Aura component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit memory corruption by delivering a crafted HTML page, potentially achieving arbitrary code execution outside the browser's security sa...

CVE-2026-79235

CVE-2026-79235 is a use-after-free in the WebGL component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution outside the browser's security sand...

CVE-2026-78895

An information leak in the Paint component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. The Red Hat advisory further notes this could lead to unauthorized access to sensitive information . The CVSS v3.1 base sco...

CVE-2026-78948

Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78948

Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78908

An information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by tricking a user into opening a crafted HTML page. This can lead to exposure of sensitive data across origins. The NVD-assigned CVSS v3.1 score is 4.3 (Me...

CVE-2026-78965

CVE-2026-78965 is an uninitialized resource flaw in ANGLE , Chromium's graphics rendering layer, present in Google Chrome prior to 152.0.7977.65 and Microsoft Edge (Chromium) prior to 152.0.4191.53 . A remote attacker can exploit it via a crafted HTML page to obtain cross-origin data . Chromium r...

CVE-2026-79072

CVE-2026-79072 is an improper state validation in the Performance component of Google Chrome , allowing a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. The bug was reported internally by Google on 2026-06-27 and rated High severity by Chromium (CVSS 8.1). ...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to version 152.0.7977.65 (Windows/Mac) / 152.0.7977.64 (Linux). A remote attacker can potentially bypass the web origin policy via a crafted HTML page, which could lead to unauthorized access to sensit...

CVE-2026-79288

Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78989

CVE-2026-78989 is an out-of-bounds read in ANGLE , a graphics translation library component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the flaw by serving a crafted HTML page , requiring user interaction but no prior authentication. Suc...

CVE-2026-79150

CVE-2026-79150 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-05...

AZL-98195 CVE-2026-79992 affecting package emacs 29.4-4

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-55663

mediasoup , a WebRTC video conferencing system, contains a flaw in its built-in SCTP stack where state cookies are authenticated using only hardcoded magic values (msworker and 0xAD81) instead of a per-instance secret with HMAC, violating RFC 9260 §5.1.3. An on-path attacker targeting PlainTransp...