Chromium: CVE-2026-79003 Incorrect authorization in Device

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79003

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering tactics, could exploit an incorrect authorization vulnerability in the Device component. This could allow the attacker to bypass system access restrictions through a specially crafted HTML page...

DEBIAN-CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

An incorrect authorization flaw in the Device component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Medium severity (CVSS 3.1: 4.3 , vector AV:N/AC:L/PR:N...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13869

An use after free flaw was found in the Device component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497610642...

PT-2026-27666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC ALSA System on Chip subsystem, specifically in the SDCA Simple Device Configuration Architecture component. The find sdca entity iot...

The vulnerability of the mfd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mfd component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bj10v_print_page() function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents, allowing a malicious individual to execute arbitrary code or cause a service failure.

The vulnerability of the bj10vprintpage function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data...

CVE-2019-0600

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601...