CVE-2026-78954

A flaw was found in Google Chrome's Extensions. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved through a crafted HTML page, potentially leading to unauthorized access or...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78961

A flaw was found in Google Chrome's core functionality. A remote attacker, who has already compromised a part of the browser responsible for rendering web content the renderer process and used social engineering tactics, could bypass the security mechanism that isolates content from different...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...

CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

CVE-2026-78905

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

CVE-2026-79230

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

CVE-2026-79232

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to exploit memory corruption by crafting a malicious HTML page. Successful exploitation can potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79219

A flaw was found in Google Chrome's Bluetooth component. This use-after-free vulnerability, a type of memory corruption, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering techniques and a specially...

CVE-2026-79228

A flaw was found in Google Chrome. An incorrect authorization vulnerability within the Site Isolation feature allows a remote attacker, who has compromised the renderer process, to bypass site isolation. This can be achieved by a crafted HTML page, leading to unauthorized access to privileged pag...

CVE-2026-79218

A flaw was found in Google Chrome's Sandbox component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation is possible through a specially crafted HTML page, leading to a...

CVE-2026-79211

A flaw was found in Google Chrome's USB component. This incorrect authorization vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79202

A flaw was found in Chromecast within Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further syste...

CVE-2026-79209

A flaw was found in Google Chrome's Animation component. A remote attacker could exploit a type confusion vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code within the browser's sandbox, leading to unauthorized actions or data...

CVE-2026-79205

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...

CVE-2026-79198

A flaw was found in Google Chrome. This use-after-free vulnerability in the Platform component allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can bypass security restrictions and run malicious code within the browser's...

CVE-2026-79191

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the SiteIsolation feature allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by tricking a user into interacting...

CVE-2026-79200

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...

CVE-2026-79178

A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys component, related to incorrect authorization. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass the web origin polic...