CVE-2026-78956

A flaw was found in Chromium's V8 JavaScript engine. This type confusion vulnerability could allow a remote attacker, through social engineering, to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized...

CVE-2026-78962

A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...

CVE-2026-78959

A flaw was found in Google Chrome's FileSystem. This improper handling of case sensitivity could allow a remote attacker, leveraging social engineering, to bypass system access restrictions. The attacker could achieve this by enticing a user to visit a crafted HTML page...

CVE-2026-78898

An incorrect authorization flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499423269...

CVE-2026-79176

A flaw was found in Google Chrome. This user interface UI misrepresentation in the Extensions feature allows a remote attacker to leverage social engineering techniques. By tricking a user into installing a specially crafted Chrome extension, the attacker can obtain sensitive information from the...

CVE-2026-79137

An incorrect authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505951430...

CVE-2026-79075

An information leak flaw was found in the Geolocation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533093250...

CVE-2026-79098

A flaw was found in Google Chrome. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to misrepresent user interface UI elements. This misrepresentation could allow the attacker to spoof UI elements, potentially deceiving users...

CVE-2026-79084

A flaw was found in Google Chrome's Notifications component. This vulnerability, caused by inadequate encryption strength, allows a remote attacker to bypass the web origin policy. By leveraging social engineering with a crafted HTML page, an attacker can exploit this flaw, potentially leading to...

CVE-2026-79266

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, could exploit a use-after-free vulnerability in DevTools. This could lead to the execution of arbitrary code within the browser's sandbox environment...

CVE-2026-79047

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517515945...

CVE-2026-79012

A flaw was found in Chromium's Safebrowsing component. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78961

A flaw was found in Google Chrome's core functionality. A remote attacker, who has already compromised a part of the browser responsible for rendering web content the renderer process and used social engineering tactics, could bypass the security mechanism that isolates content from different...

CVE-2026-78945

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component could allow a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to potenti...

CVE-2026-78934

A flaw was found in Google Chrome's ReadAloud component. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a crafted HTML page, to execute arbitrary code within the browser's sandbox. This could lead to unauthorized access or control over the affected...

CVE-2026-79211

A flaw was found in Google Chrome's USB component. This incorrect authorization vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79191

An incorrect authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517606780...

CVE-2026-79180

A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...

CVE-2026-79078

A flaw was found in the Federated Credential Management FedCM component of Google Chrome. This vulnerability, known as a use-after-free, allows a remote attacker to execute unauthorized code outside of the browser's security protections. By leveraging social engineering tactics and a specially...