CVE-2026-79022

A UI misrepresentation vulnerability exists in the Transactions Platform of Google Chrome (prior to version 152.0.7977.65 ). This flaw allows a remote attacker to potentially spoof UI elements by leveraging social engineering techniques through a crafted HTML page. Exploitation details are not pr...

CVE-2026-79261

A flaw in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This is due to an incorrect authorization vulnerability within the Controls component. Exploitation could potentially lead to unauthorized access t...

CVE-2026-79147

A vulnerability in Skia within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to potentially leak sensitive information via a crafted HTML page . The vulnerability is classified with a Medium CVSS score and a Low Chromium security ...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79206

Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78979

Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

An integer overflow vulnerability exists in WebRTC within Google Chrome prior to version 152.0.7977.65 . A remote attacker could potentially execute arbitrary code inside the sandbox by navigating to a crafted HTML page. This issue has been addressed in various distributions, including Debian 12 ...

EUVD-2026-66030

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

A flaw in the Glic component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to obtain sensitive information . This vulnerability is triggered by enticing a user to visit a specially crafted HTML page . The impact is characterized as an observable discrepancy with a Me...

CVE-2026-79077

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79001

An information leak exists in Bluetooth within Google Chrome on Mac systems prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage social engineering to trick a user into visiting a crafted HTML page , potentially resulting in the disclosu...

CVE-2026-79077

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79124

Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...