CVE-2026-79237

CVE-2026-79237 is an incorrect authorization flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. The Chromium securi...

CVE-2026-78985

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution in the FileSystem component. A remote attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium security team rates this as Medium ...

CVE-2026-79028

CVE-2026-79028 is an observable discrepancy in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page to the victim, enabling the attacker to obtain sensitive information . Chromium classifies the security...

CVE-2026-78898

CVE-2026-78898 is an incorrect authorization vulnerability in the Downloads component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could exploit a crafted HTML page to bypass system access restrictions . Chromium rates this as Medium severity. The f...

CVE-2026-78941

CVE-2026-78941 is an information leak in the Core component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially exposing cross-orig...

CVE-2026-78945

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79032

CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...

CVE-2026-79109

CVE-2026-79109 is an improper input validation vulnerability in the Printing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page that tri...

CVE-2026-78999

Improper privilege management in the Navigation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to, via a crafted HTML page and social engineering, potentially execute arbitrary code outside the sandbox . The Chromium pr...

CVE-2026-78945

CVE-2026-78945 is a use-after-free vulnerability in the Views component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can potentially execute arbitrary code outside the sandbox by directing a victim to a crafted HTML page. Chromi...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...

CVE-2026-79016

CVE-2026-79016 is an observable discrepancy in SVG handling in Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , violating the same-origin policy. Chromium assigns it a Medium security severity. The fix is included in...

CVE-2026-78966

CVE-2026-78966 is an externally controlled reference vulnerability in the QUIC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin data that should be restrict...

CVE-2026-79267

CVE-2026-79267 is a race condition in Workers affecting Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. Chromium rated the severity as Medium . The vulnerability is fixed i...

CVE-2026-79010

CVE-2026-79010 is a use-after-free type vulnerability (operation on a resource after expiration or release) in the Network component of Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could exploit this to bypass the web origin policy via a craf...

CVE-2026-79262

CVE-2026-79262 is an incorrect authorization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access to sens...

CVE-2026-79176

CVE-2026-79176 is a UI misrepresentation vulnerability in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering through a crafted Chrome extension, could obtain sensitive information from the user. Chromium assigne...

CVE-2026-79106

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Input component. A remote attacker who had already compromised the renderer process and leveraged social engineering could bypass the web origin policy using a crafted HTML page. The Chromium security tea...

CVE-2026-78958

CVE-2026-78958 is an uninitialized resource vulnerability in the Skia library within Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data by serving a crafted HTML page to the victim. The Chrom...

CVE-2026-78961

CVE-2026-78961 is an incorrect authorization vulnerability in the Core component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can craft an HTML page that bypasses the web origin policy . The C...