82113 matches found
CVE-2026-79206
Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79196
A race condition in the Editing feature of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering, to obtain sensitive information via a crafted HTML page. Chromium rates this as Low severity, with a CVSS 3.1 score of 5.3 (Medium) reflecting the high attack c...
EUVD-2026-66028
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-79000
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-78979
CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker leveraging social engineering can bypass the web origin policy via a crafted HTML page, potentially gaining unauthorized access to sensitive information or actio...
CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79196
Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78950
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79196
Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78950
An integer overflow in WebRTC within Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The root cause resides in WebRTC's RTCRtpSender.setParameters() path, where a WebIDL unsigned long maxBitrate value ...
CVE-2026-79000
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79000
CVE-2026-79000 is an improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass the web origin policy by sending crafted network traffic, potentially leading to unauthorized access...
CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78950
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79181
An observable discrepancy in Glic within Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The flaw requires user interaction and has a high attack complexity , reflected in the CVSS 3.1 base score of 5.3 (Medium) with no impac...
CVE-2026-79124
CVE-2026-79124 is an information leak in the Intents component of Google Chrome on Android (prior to 152.0.7977.65 ). A remote attacker can exploit it via a crafted HTML page to leak sensitive information. Chromium rates the severity as Low , while CVSS 3.1 scores it 6.5 (MEDIUM) with a network v...
CVE-2026-79184
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...