CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

CVE-2026-79070

Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78903

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79205

CVE-2026-79205 is an incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to open a crafted HTML page , potentially gaining unauthorized access to sensitive information or performing a...

CVE-2026-79234

CVE-2026-79234 is a CSS injection vulnerability in Google Chrome prior to version 152.0.7977.65 , rated Medium severity (CVSS 6.5). A remote attacker can obtain sensitive information by enticing a user to visit a specially crafted HTML page. The attack requires user interaction (visiting the page...

CVE-2026-78903

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

CVE-2026-78959 affects the FileSystem component in Google Chrome prior to 152.0.7977.65 . The root cause is improper handling of case sensitivity, allowing a remote attacker who leverages social engineering to bypass system access restrictions by getting a user to visit a crafted HTML page. The C...

CVE-2026-78903

CVE-2026-78903 is an incomplete cleanup flaw in the SiteIsolation feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation, potentially gaining unauthorized access to sensitive informa...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79070

Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78892

An incorrect authorization flaw in the Chromoting component of Google Chrome on Windows prior to 152.0.7977.65 allows a local attacker to bypass system access restrictions by executing a local program. The Chromium security severity is Medium , while NVD assigns CVSS 3.1: 7.1 (HIGH) with a local ...

CVE-2026-79070

CVE-2026-79070 is a Medium -severity vulnerability in Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution in the browser's Cache component allows a remote attacker to bypass the web origin policy by convincing a user to visit a crafted HTML page, potentially leading t...

CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79238

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering and a crafted Chrome extension , to bypass the web origin policy. Per Red Hat, this bypass could lead to unauthorized access to sensitive ...