CVE-2026-79084

CVE-2026-79084 affects Google Chrome on Windows prior to version 152.0.7977.65 . The vulnerability resides in the Notifications component, where inadequate encryption strength allowed a remote attacker leveraging social engineering to bypass the web origin policy via a crafted HTML page. Chromium...

CVE-2026-78991

This race condition in WebProtect affects Google Chrome versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process could exploit it via a crafted HTML page to obtain sensitive information . Chromium rates this Medium severity, reflecting the elevated prer...

CVE-2026-79140

CVE-2026-79140 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page , potentially enabling arbitrary code execution outside the sandbox . Chromium classifi...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78942

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in the Loader component. A remote attacker can exploit this via crafted network traffic to bypass the web origin policy . Chromium classifies the severity as Medium . No exploitation or exploit code has bee...

CVE-2026-79128

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium rates the security severity as Medium . No exploitation details are provided in the available docume...

CVE-2026-79065

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Network component. The vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by delivering a crafted HTML page. Chromium rates this as Med...

CVE-2026-78909

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

An information leak in the DOM component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to obtain sensitive information through a crafted HTML page . The Chromium security team rated this Medium severity. No exploitation details or in-the-wild a...

CVE-2026-79144

CVE-2026-79144 is an information leak in the Skia graphics library used by Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , breaking the same-origin policy. The Chromium project assigned this a Medium security severi...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78909

CVE-2026-78909 is a use after free vulnerability in the Views component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbox . Chromium rates the s...

CVE-2026-78990

CVE-2026-78990 is a use-after-free vulnerability in the Compositing component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by serving a crafted HTML page, leading to arbitrary code execution inside the Chrome sandbox . Chromium rates the severity as Medium . The fix ...

CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , potentially leaking cross-origin data. Chromium rates the severity as Medium . Remediation is to upd...

CVE-2026-79129

CVE-2026-79129 is a use-after-free vulnerability in the Sessions component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction , allowing execution of arbitrary code outside the sandbox ....

CVE-2026-79210

CVE-2026-79210 is a use after free vulnerability in the Audio component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage it to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium...

CVE-2026-79046

This is a race condition in the Permissions component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit this flaw to bypass the web origin policy using a crafted HTML page. The Chromium security team rated the severity as Me...

CVE-2026-79210

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...