11224 matches found
CVE-2026-79074
Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79074
CVE-2026-79074 is an information leak in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to obtain sensitive information from the browser. The CVSS 3.1 score is 5.3 (Medium) , with h...
CVE-2026-79074
Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79199
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79251
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79213
An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android (prior to version 152.0.7977.65 ) allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability was rated Medium by Chromium and scored CVSS 4.3 ...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78940
Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...
CVE-2026-78940
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78894
A race condition in the Payments component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to leak cross-origin data by rendering a crafted HTML page. The Chromium security team rated this as Medium severity; the assigned C...
CVE-2026-78910
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79264
Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78910
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65887
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78907
An incorrect authorization flaw in the WebProtect component of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to leak sensitive information by enticing a user to visit a crafted HTML page. The Chromium security team rated this Medium severity; CVSS 3.1 scores it 6.5 (ne...
CVE-2026-78891
CVE-2026-78891 is a buffer overflow in the WebRTC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this by luring a user to a crafted HTML page , leading to arbitrary code execution inside the Chrome sandbox , potentially resulting in unauthorized control ...
CVE-2026-79031
Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...