EUVD-2026-66072

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79125

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79125

CVE-2026-79125 is an information leak in the XR (WebXR) component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to obtain sensitive information via a crafted HTML page. The underlying root cause is not further detailed beyond "information leak in XR." Google rates the Chrom...

CVE-2026-79197

A use-after-free flaw in the V8 JavaScript engine within Google Chrome versions prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The vulnerability is rated Chromium severity: Low but carries a CVSS 3.1 score of 8.8 (HIGH)...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

CVE-2026-79246 is an information leak in the DataTransfer component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can craft an HTML page that, when visited by a user, discloses sensitive information. The vulnerability requires user interaction (visiting the craf...

EUVD-2026-66063

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

CVE-2026-79244 is a use-after-free vulnerability in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can execute arbitrary code inside the sandbox by delivering a crafted HTML page to the user. Chromium classifies this as Low severity, while the CVSS 3.1...

CVE-2026-78956

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

CVE-2026-79018 is an information leak in the FoldableAPIs component of Google Chrome (desktop), affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by serving a crafted HTML page that, when opened by a victim, leaks sensitive information. The attack require...

CVE-2026-79056

A use-after-free flaw in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The CVSS 3.1 score is 9.6 (Critical) with a changed scope, requiring user inte...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78956

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering via a crafted HTML page, to execute arbitrary code inside the sandbox. Chromium rates the severity as Low , while the CVSS 3.1 base score is 8.8 (HIGH) with required user interacti...

CVE-2026-79009

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 , where a remote attacker leveraging social engineering can spoof UI elements via a crafted HTML page. The Chromium project rates it Low severity, with a CVSS v3.1 score of 4.3 (Medium) . The CISA SSVC ...

CVE-2026-78896

Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78896

CVE-2026-78896 is an information leak in the StorageAccessAPI of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by serving a crafted HTML page to the victim, requiring user interaction but no prior authentication. Chromium rates the severity as Low ; CVSS 3....