CVE-2026-78967

A flaw was found in chromium-browser. Missing authorization in the Back-Forward Cache BFCache component of Google Chrome allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by an attacker who has already compromised the renderer process, through the...

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...

CVE-2026-78959

A flaw was found in Google Chrome's FileSystem. This improper handling of case sensitivity could allow a remote attacker, leveraging social engineering, to bypass system access restrictions. The attacker could achieve this by enticing a user to visit a crafted HTML page...

CVE-2026-78942

A flaw was found in the Loader component of Google Chrome. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to bypass the web origin policy by sending specially crafted network traffic. Bypassing the web origin policy can lead to unauthorized access to...

CVE-2026-78946

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the 'Select' component allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origi...

CVE-2026-78953

A flaw was found in Google Chrome. This missing authorization vulnerability in SiteIsolation allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This can be achieved by providing a specially crafted PDF file...

CVE-2026-78941

A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-78940

A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

CVE-2026-78915

A flaw was found in Google Chrome. A race condition in the Enterprise feature on Windows could allow an adjacent attacker to potentially execute arbitrary code outside the sandbox. This vulnerability is triggered by crafted network traffic, leading to unauthorized control over the affected system...

CVE-2026-78898

A flaw was found in Google Chrome's Downloads feature. A remote attacker can exploit this vulnerability by leveraging social engineering techniques with a specially crafted HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized access or...

CVE-2026-79226

A flaw was found in chromium-browser. This vulnerability, related to improper privilege management in Regional Capabilities, allows a remote attacker to bypass system access restrictions. By leveraging social engineering and a crafted Chrome extension, an attacker can gain unauthorized access...

CVE-2026-79221

A flaw was found in Dawn, a component of Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox environment,...

CVE-2026-79234

A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...

CVE-2026-79192

A flaw was found in Google Chrome. This improper input validation vulnerability, specifically within the Variations component, could allow a remote attacker to bypass the web origin policy. This bypass is achieved by sending specially crafted network traffic, potentially leading to unauthorized...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-79212

A flaw was found in Google Chrome. This vulnerability, stemming from missing authorization in the Passwords component, could allow a remote attacker to bypass the web origin policy. To exploit this, the attacker would first need to compromise the browser's renderer process and employ social...

CVE-2026-79186

A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...