CVE-2026-79038

Incorrect authorization in the WebProtect component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security team classified this as Medium severity. Users should upgrade to Chrome 152.0.7977.65 or later to re...

CVE-2026-78940

CVE-2026-78940 is an improper initialization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium . Remediation is to ...

CVE-2026-78910

A buffer overflow in the V8 JavaScript engine of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The Chromium team classifies this as Medium severity. No exploitation details or in-the-wild activity are ...

CVE-2026-78894

A race condition in the Payments component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.6...

CVE-2026-79066

CVE-2026-79066 is an improper input validation flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , a key browser sandboxing mechanism. The Chr...

CVE-2026-79057

CVE-2026-79057 is a race condition in the Start component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via a co-installed app. The Chromium security team rated ...

CVE-2026-79264

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in its Preload component. A remote attacker can exploit this by serving a crafted HTML page to a victim, resulting in a bypass of the web origin policy . Chromium's internal security severity is rated Mediu...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page , enabling arbitrary code execution inside the sandbox . The Chromium security severity is r...

CVE-2026-78907

CVE-2026-78907 is an incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the victim's browser. Chromium rates the severity as Medium . Reme...

CVE-2026-79137

This vulnerability affects Google Chrome prior to version 152.0.7977.65 , specifically the Extensions subsystem. The root cause is an incorrect authorization flaw that allows a remote attacker, leveraging social engineering , to bypass system access restrictions through a crafted Chrome extension...

CVE-2026-78969

CVE-2026-78969 is an uninitialized resource vulnerability in the Video component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to read memory inside the sandbox , potentially leaking sensitive data without requiring user interaction beyond ...

CVE-2026-79087

An injection vulnerability in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. The Chromium project assigned a severity of Medium . Updating to version 152.0.7977.65 or later is the indicated re...

CVE-2026-79248

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in the Input component. A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is rated Medium , reflecting t...

CVE-2026-78891

CVE-2026-78891 is a buffer overflow in the WebRTC component of Google Chrome affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability via a crafted HTML page to achieve arbitrary code execution inside the sandbox . Chromium rates the security severity as Medium...

CVE-2026-79031

CVE-2026-79031 is an improper resource exposure vulnerability in the Preload component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass site isolation , potentially exposing resources across isolated origins. Chr...

CVE-2026-79110

CVE-2026-79110 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is a missing authorization in the Preload component, allowing a remote attacker to bypass the web origin policy via a crafted HTML page. Chromium rates the severity as Medium . No in-the-wild exploitation details are ...

CVE-2026-79136

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by serving a crafted HTML page to the victim. The Chromium security team classified the severity as Medium . The fix is available in Chr...

CVE-2026-79116

CVE-2026-79116 is a missing authorization flaw in the Viz component of Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium , consistent with t...

CVE-2026-79006

A protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by sending crafted network traffic. The Chromium team rated the severity as Medium . Users should update to version 152.0.7977.65...

CVE-2026-79084

CVE-2026-79084 affects Google Chrome on Windows prior to version 152.0.7977.65 . The vulnerability resides in the Notifications component, where inadequate encryption strength allowed a remote attacker leveraging social engineering to bypass the web origin policy via a crafted HTML page. Chromium...