CVE-2026-78905

CVE-2026-78905 is a type confusion vulnerability in ANGLE , a component used in Google Chrome . Versions prior to 152.0.7977.65 are affected. A remote attacker can potentially execute arbitrary code outside the browser's security sandbox by enticing a user to visit a crafted HTML page . The CNA (...

CVE-2026-79151

Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-78905

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79127

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79050

CVE-2026-79050 is an incorrect authorization flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can bypass system access restrictions by luring a user into opening a crafted HTML page . The Chromium security severity is Medium (CVSS 4.3, network vect...

CVE-2026-79127

CVE-2026-79127 is an out-of-bounds write vulnerability in the ANGLE component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page, potentially executing arbitrary code outside the browser's security sandbox and compromising th...

CVE-2026-78905

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79229

CVE-2026-79229 is an uninitialized resource vulnerability in ANGLE , a graphics translation library within Chromium (Google Chrome and Microsoft Edge). Prior to Chrome 152.0.7977.65 , a remote attacker who had already compromised the renderer process could leverage this flaw via a crafted HTML pa...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79228

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78953

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-79229

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65926

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79214

CVE-2026-79214 is an improper input validation flaw in the Preload component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to bypass the web origin policy , potentially gaining unauthorized access to da...

CVE-2026-79002

An incorrect authorization flaw in the SiteIsolation component of Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to bypass site isolation using a crafted HTML page. The Red Hat advisory notes this bypass could lead to further comprom...

CVE-2026-78953

CVE-2026-78953 is a missing authorization flaw in the SiteIsolation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass site isolation by supplying a crafted PDF file . Chromium rates this Medium severity; CVS...

CVE-2026-79214

Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79229

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...