25548 matches found
CVE-2026-79009
UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79009
Google Chrome versions prior to 152.0.7977.65 are vulnerable to a UI misrepresentation flaw. A remote attacker can use social engineering and a crafted HTML page to spoof UI elements , potentially tricking users into performing malicious actions like phishing. The vulnerability is listed with a L...
CVE-2026-78946
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78946
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79090
Google Chrome versions prior to 152.0.7977.65 are vulnerable to a flaw in the Actor component involving improper privilege management . A remote attacker can bypass system access restrictions by leveraging social engineering techniques through a specially crafted HTML page . For Debian 12 bookwor...
CVE-2026-78946
A vulnerability in the Select feature of Google Chrome (prior to version 152.0.7977.65 ) was caused by incorrect authorization . This flaw allowed a remote attacker to bypass the web origin policy by using a crafted HTML page. The vulnerability has been addressed in several distributions, includi...
CVE-2026-79041
The Google Chrome browser on Mac (prior to version 152.0.7977.65 ) is vulnerable to a missing authorization flaw in the Browser component. A remote attacker could use social engineering to deliver a crafted HTML page , allowing them to bypass the web origin policy and access a privileged page. Fo...
CVE-2026-79284
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79040
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79040
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79123
Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79123
Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79273
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79273
A flaw in the WebView component of Google Chrome on Android (prior to version 152.0.7977.65) involves incorrect reference resolution . A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page to bypass the web origin policy , potentially leading to unauthoriz...
CVE-2026-79273
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79147
Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79233
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
