82407 matches found
CVE-2026-79023
Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79193
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79293
Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79293
An information leak in the Animation component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information by visiting a crafted HTML page . The vulnerability is rated Medium severity (CVSS 3.1: 6.5 ) with a network attack vector, no privileges requir...
CVE-2026-78976
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79191
CVE-2026-79191 is an incorrect authorization flaw in the SiteIsolation feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage social engineering to bypass site isolation using a crafted HTML page. The Chromium security sev...
CVE-2026-79099
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79191
Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79276
Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79099
CVE-2026-79099 is a missing authorization vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium rates it Medium severity; the CVSS 3.1 score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U...
CVE-2026-79191
Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79099
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79276
Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79024
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78976
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79024
CVE-2026-79024 is an information leak in the ServiceWorker component of Google Chrome (Chromium), affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page , enabling the theft of sensitive user information. The C...
CVE-2026-79276
CVE-2026-79276 is an improper privilege management vulnerability in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can bypass system access restrictions by getting a user to interact with a crafted HTML page . The Chromium sec...
CVE-2026-78976
CVE-2026-78976 is an improper input validation flaw in the StorageAccessAPI component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page,...