CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79072

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79111

CVE-2026-79111 is an improper input validation flaw in Dawn , the GPU abstraction layer of Google Chrome , affecting versions prior to 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the browser's se...

CVE-2026-78965

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79093

Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to version 152.0.7977.65 (Windows/Mac) / 152.0.7977.64 (Linux). A remote attacker can potentially bypass the web origin policy via a crafted HTML page, which could lead to unauthorized access to sensit...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability was reported by Google...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in the WebRTC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox , potentially enabling furth...

CVE-2026-79202

CVE-2026-79202 is a use-after-free vulnerability in the Chromecast component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , allowing execution of arbitrary code inside the browser sandbox . The vuln...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

CVE-2026-79011 is a UI misrepresentation vulnerability in the Browser component of Google Chrome prior to 152.0.7977.65 , rated High (CVSS 8.1). A remote attacker leveraging social engineering could bypass system access restrictions via a crafted HTML page, with impacts to confidentiality and int...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

CVE-2026-79195 is a use after free in the Script component of Google Chrome , reported by Google on 2026-04-12. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

CVE-2026-79069 is a memory corruption in the Tint component (WebGL shader translator) of Google Chrome on macOS , affecting versions prior to 152.0.7977.65 . A remote attacker can trigger the flaw by enticing a user to visit a crafted HTML page , potentially leading to arbitrary code execution ou...