CVE-2026-78960

Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78960

CVE-2026-78960 is an information leak in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can obtain cross-origin data by installing a specially crafted Chrome extension. The vulnerability requires user interaction (installing the ...

CVE-2026-79064

Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79064

Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-65987

Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79064

CVE-2026-79064 is a use after free in the Network component of Google Chrome on Mac (versions prior to 152.0.7977.65 ). A remote attacker leveraging social engineering can achieve arbitrary code execution outside the sandbox via a crafted Chrome extension . Chromium rates the severity as Medium ,...

CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78944

A use after free vulnerability in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension. The vulnerability is classified by Chromium as Medium severity but carries a CV...

CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79238

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering and a crafted Chrome extension , to bypass the web origin policy. Per Red Hat, this bypass could lead to unauthorized access to sensitive ...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-65952

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-65902

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79226

An improper privilege management flaw in the Regional Capabilities component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering, to bypass system access restrictions via a crafted Chrome extension. Microsoft Edge (Chromium-based) is also affected. The ...

CVE-2026-79176

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation in the Extensions feature. A remote attacker can leverage social engineering to trick a user into installing a specially crafted Chrome extension , allowing them to obtain sensitive information from the user's browser. The...

EUVD-2026-65838

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79219

Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...