CVE-2026-78962

CVE-2026-78962 is an uninitialized resource vulnerability in the WebXR component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that potentially leaks cross-origin data , exposing confidential information from ...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

CVE-2026-79252 is an information leak in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by enticing a user to visit a crafted HTML page . The underlying flaw allows data from other origins to be leaked through the ServiceWorker...

CVE-2026-79258

CVE-2026-79258 is an incorrect authorization vulnerability in WebXR within Google Chrome prior to version 152.0.7977.65 . A remote attacker leveraging social engineering could use a crafted HTML page to obtain cross-origin data , bypassing expected origin restrictions. Chromium classifies the sev...

CVE-2026-79059

Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79059

CVE-2026-79059 is an information leak in the Back-Forward Cache (BFCache) component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to obtain cross-origin data , resulting in a limited confidentiality imp...

CVE-2026-79059

Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78949

Google Chrome on Android versions prior to 152.0.7977.65 contain a vulnerability in CustomTabs characterized by an observable discrepancy that allows a local attacker to obtain cross-origin data via a co-installed app. The Chromium project classifies the severity as Medium . Remediation is to upd...

CVE-2026-79146

An information leak in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app . Chromium assigned a Medium severity rating. The fix is available in version 152.0.7977.65 . No exploitation details are provided in th...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79193

CVE-2026-79193 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , enabling the leak of cross-origin data to a victim who interacts with the page. The flaw is rated Medium severity by both ...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process can use a specially crafted HTML page to leak cross-origin data , bypassing s...

CVE-2026-78936

CVE-2026-78936 affects Google Chrome on Android prior to version 152.0.7977.65 . The vulnerability resides in the CustomTabs component, where an observable discrepancy could be leveraged by a local attacker to obtain cross-origin data through a co-installed app. The Chromium project classifies th...

CVE-2026-78955

CVE-2026-78955 is an observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 . The flaw allowed a remote attacker to potentially obtain cross-origin data by serving a crafted HTML page to the victim, enabling information leakage across origin boundaries. Chromium classif...

CVE-2026-79285

CVE-2026-79285 affects ANGLE in Google Chrome on Windows , prior to version 152.0.7977.65 . The root cause is an uninitialized resource , which allows a remote attacker to obtain cross-origin data by delivering a crafted HTML page. The Chromium project rated this as Medium severity. Users should ...

CVE-2026-79120

CVE-2026-79120 is an uninitialized resource flaw in ANGLE within Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to potentially obtain cross-origin data . Chromium classifies the severity as Medium . The fix is included in Chrome 152.0.797...