CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79242

CVE-2026-79242 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is an observable discrepancy in HTML rendering that allows a remote attacker to obtain sensitive information via a crafted HTML page. The Chromium security team rates the severity as Medium . The fix is available in C...

CVE-2026-79180

CVE-2026-79180 is a UI misrepresentation vulnerability in the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering could spoof UI elements via a crafted HTML page, potentially misleading users into interacting with fake interfac...

CVE-2026-79023

CVE-2026-79023 is an incorrect authorization flaw in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page , enabling them to obtain sensitive information from the victim. Chromium classifies the severity as Medium . The ...

CVE-2026-79193

CVE-2026-79193 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page that leaks cross-origin data . Chromium classified the severity as Medium . The fix is available in Chrome 152...

CVE-2026-79293

CVE-2026-79293 is an information leak in the Animation component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to obtain sensitive information. Chromium rates the severity as Medium . The fix is available in Chrome 152.0.7977.65, released via...

CVE-2026-79099

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...

CVE-2026-79191

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in its SiteIsolation mechanism. A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation using a crafted HTML page. This allows cross-site data access...

CVE-2026-79276

CVE-2026-79276 is an improper privilege management flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions. The Chromium project rates the severity as Mediu...

CVE-2026-79024

CVE-2026-79024 is an information leak in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by tricking a user into loading a crafted HTML page. Chromium assigns a Medium security severity to this issue. The fix is avai...

CVE-2026-78976

CVE-2026-78976 is an improper input validation flaw in StorageAccessAPI within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this via a crafted HTML page to bypass the web origin policy . Chromium rates...

CVE-2026-79173

Google Chrome prior to 152.0.7977.65 contained a UI misrepresentation vulnerability in the WebAppInstalls component. A remote attacker could exploit this by serving a crafted HTML page to spoof UI elements, rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65 , released...

CVE-2026-79094

CVE-2026-79094 is a race condition in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass system access restrictions . Chromium assigned it a Medium security severity. The fix is available in ...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79008

Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

CVE-2026-78975 is an incorrect authorization vulnerability in the DOM component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from the victim. Chromium classifies the severity as Medium . The fix is a...

CVE-2026-79287

CVE-2026-79287 is an observable discrepancy in the Forms component of Google Chrome versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain sensitive information from a victim's browser. Chromium rates the security severity as Medium . The fix is a...

EUVD-2026-65938

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leak cross-origin data via a crafted HTML page. Chromium classifies the security severity as Medium . Th...