3707 matches found
CVE-2026-78894
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78896
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78896
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78896
CVE-2026-78896 is an information leak in the StorageAccessAPI of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by serving a crafted HTML page to the victim, requiring user interaction but no prior authentication. Chromium rates the severity as Low ; CVSS 3....
CVE-2026-79034
CVE-2026-79034 is an information leak in CORS (Cross-Origin Resource Sharing) in Google Chrome prior to 152.0.7977.65 (also affecting chromium-browser ). A remote attacker who has already compromised the renderer process can leak cross-origin data by tricking a user into visiting a crafted HTML p...
CVE-2026-79034
Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78960
CVE-2026-78960 is an information leak in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could obtain cross-origin data through a crafted Chrome extension. The vulnerability is rated Medium severity by Chromiu...
CVE-2026-79252
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78962
CVE-2026-78962 is an uninitialized resource vulnerability in the WebXR component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that potentially leaks cross-origin data , exposing confidential information from ...
CVE-2026-78962
Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78962
Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79252
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79252
CVE-2026-79252 is an information leak in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by enticing a user to visit a crafted HTML page . The underlying flaw allows data from other origins to be leaked through the ServiceWorker...
CVE-2026-79258
CVE-2026-79258 is an incorrect authorization vulnerability in WebXR within Google Chrome prior to version 152.0.7977.65 . A remote attacker leveraging social engineering could use a crafted HTML page to obtain cross-origin data , bypassing expected origin restrictions. Chromium classifies the sev...
CVE-2026-79059
Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79059
CVE-2026-79059 is an information leak in the Back-Forward Cache (BFCache) component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to obtain cross-origin data , resulting in a limited confidentiality imp...
CVE-2026-79059
Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78949
Google Chrome on Android versions prior to 152.0.7977.65 contain a vulnerability in CustomTabs characterized by an observable discrepancy that allows a local attacker to obtain cross-origin data via a co-installed app. The Chromium project classifies the severity as Medium . Remediation is to upd...
CVE-2026-79146
An information leak in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app . Chromium assigned a Medium severity rating. The fix is available in version 152.0.7977.65 . No exploitation details are provided in th...