CVE-2026-79196

CVE-2026-79196 is a race condition in the Editing component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can obtain sensitive information by convincing a user to open a crafted HTML page. Chromium rates the security severity as ...

CVE-2026-79181

An observable discrepancy in the Glic component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page . The Chromium security team classified this as Low severity. No exploit or in-the-wild activity is indicated in...

CVE-2026-79249

CVE-2026-79249 is a code injection vulnerability in the Bisection component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this by supplying a crafted file , potentially allowing sensitive information disclosure . The Chromium project assigned this a Medium security sev...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium classified the severity as Medium . The vulnerab...

CVE-2026-79234

CVE-2026-79234 is a CSS injection vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page, potentially enabling them to obtain sensitive information from the victim. The Chromium security team classified the severity as Medium . Th...

CVE-2026-79242

CVE-2026-79242 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is an observable discrepancy in HTML rendering that allows a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security team rates the severity as Medium . The fix is available in C...

CVE-2026-79023

CVE-2026-79023 is an incorrect authorization flaw in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page , enabling them to obtain sensitive information from the victim. Chromium classifies the severity as Medium . The ...

CVE-2026-78975

CVE-2026-78975 is an incorrect authorization vulnerability in the DOM component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from the victim. Chromium classifies the severity as Medium . The fix is a...

CVE-2026-79287

CVE-2026-79287 is an observable discrepancy in the Forms component of Google Chrome versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from a victim's browser. Chromium rates the security severity as Medium . The fix is a...

CVE-2026-78955

CVE-2026-78955 is an observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 . The flaw allowed a remote attacker to potentially obtain cross-origin data by serving a crafted HTML page to the victim, enabling information leakage across origin boundaries. Chromium classif...

CVE-2026-79013

CVE-2026-79013 is an improper input validation vulnerability in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this flaw by sending crafted network traffic to obtain sensitive information from the user. Chromium classifies the sever...

CVE-2026-79208

Missing authorization in HTTP/2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. The vulnerability was rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65 . No exploitation details are provided...

CVE-2026-79270

An uninitialized resource in ANGLE within Google Chrome prior to 152.0.7977.65 allows a remote attacker to read memory outside the sandbox via a crafted HTML page. The vulnerability was assigned a Medium severity by the Chromium security team. The fix is included in Chrome 152.0.7977.65, so updat...

CVE-2026-79086

Missing authorization in CustomTabs within Google Chrome on Android prior to 152.0.7977.65 allows a local attacker to obtain sensitive information through a co-installed app. The vulnerability is classified as Medium severity by Chromium. The fix is available in version 152.0.7977.65. No exploita...

CVE-2026-79107

CVE-2026-79107 is an incorrect authorization flaw in the TabGroups component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage crafted network traffic to potentially leak sensitive information . Chromium classifies the security severity as Medium . No public exploitation ...

CVE-2026-79038

Incorrect authorization in the WebProtect component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security team classified this as Medium severity. Users should upgrade to Chrome 152.0.7977.65 or later to re...

CVE-2026-78907

CVE-2026-78907 is an incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the victim's browser. Chromium rates the severity as Medium . Reme...

CVE-2026-79028

CVE-2026-79028 is an observable discrepancy in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page to the victim, enabling the attacker to obtain sensitive information . Chromium classifies the security...

CVE-2026-79016

CVE-2026-79016 is an observable discrepancy in SVG handling in Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , violating the same-origin policy. Chromium assigns it a Medium security severity. The fix is included in...

CVE-2026-79176

CVE-2026-79176 is a UI misrepresentation vulnerability in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering through a crafted Chrome extension, could obtain sensitive information from the user. Chromium assigne...