CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79198

CVE-2026-79198 is a use-after-free vulnerability in the Platform component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw by delivering a crafted HTML page , leading to arbitrary code execution inside the Chrome sandbox . Chromium rates the security se...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a component within Google Chrome prior to version 152.0.7977.65 . The flaw allowed a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into opening a crafted HTML page. Chromium classifies the security se...

CVE-2026-79188

CVE-2026-79188 is an out-of-bounds write in ANGLE (the cross-platform graphics library) within Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the Chromium sandbox by serving a crafted HTML page to a victim. Chromium rates the severi...

CVE-2026-78895

CVE-2026-78895 is an information leak in the Paint component of Google Chrome prior to 152.0.7977.65 , classified as High severity by Chromium. A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially exposing data across origin boundaries. The fi...

CVE-2026-79111

CVE-2026-79111 is an improper input validation vulnerability in the Dawn component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. Chromium classifies the se...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by luring a user into opening a crafted HTML page . Chromium rated the severity High . The fix is available in the st...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to a user, potentially obtaining sensitive information . The issue was rated High severity by the Ch...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in WebRTC within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , leading to arbitrary code execution inside the sandbox . Chromium rates the severity as High . The f...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79202

CVE-2026-79202 is a use after free vulnerability in Chromecast within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium assigns it a High severity rating. The fix is availa...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation vulnerability in the Browser component. A remote attacker leveraging social engineering can craft an HTML page that misrepresents the browser UI, allowing them to bypass system access restrictions . Chromium classifies the...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

CVE-2026-79195 is a use-after-free vulnerability in the Script component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The Chromium project assigned this a High severity rating...

CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

CVE-2026-79069 is a memory corruption vulnerability in Tint , a component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to a victim. Chromium assigned a High secur...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65766

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78935

This vulnerability affects Google Chrome on iOS prior to 152.0.7977.65 . The root cause is a use of uninitialized variable in the Mobile component, allowing a remote attacker to potentially execute arbitrary code outside the sandbox by convincing a user to open a crafted HTML page. Chromium assig...