CVE-2026-78975

CVE-2026-78975 is an incorrect authorization flaw in the DOM (Document Object Model) of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , resulting in a high confidentiality impact with no integrity ...

CVE-2026-79094

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79287

CVE-2026-79287 affects Google Chrome (chromium-browser), specifically the Forms component. An observable discrepancy in Forms prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The CVSS 3.1 score is 5.3 (Medium) , with high attack com...

EUVD-2026-65938

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79127

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79272

CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process can use a specially crafted HTML page to leak cross-origin data , bypassing s...

CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79050

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79151

Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-78905

CVE-2026-78905 is a type confusion vulnerability in ANGLE , a component used in Google Chrome . Versions prior to 152.0.7977.65 are affected. A remote attacker can potentially execute arbitrary code outside the browser's security sandbox by enticing a user to visit a crafted HTML page . The CNA (...

CVE-2026-79050

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79151

CVE-2026-79151 is an improper input validation flaw in Safebrowsing in Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted file. The vulnerability requires user interaction (opening the crafted file) and impacts integrity with a CVS...

CVE-2026-79050

CVE-2026-79050 is an incorrect authorization flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can bypass system access restrictions by luring a user into opening a crafted HTML page . The Chromium security severity is Medium (CVSS 4.3, network vect...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-78905

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79127

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79127

CVE-2026-79127 is an out-of-bounds write vulnerability in the ANGLE component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page, potentially executing arbitrary code outside the browser's security sandbox and compromising th...