82516 matches found
CVE-2026-79287
Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79094
A race condition in the Workers component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass system access restrictions by serving a crafted HTML page. The flaw is rated Medium severity (CVSS 6.5: network vector, low complexity, user interaction required, high integrity im...
CVE-2026-79008
Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79173
A UI misrepresentation vulnerability in the WebAppInstalls component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Rated Medium by Chromium (CVSS 5.4, with network vector, low complexity, no privileges, user interaction required, a...
CVE-2026-79173
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79173
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79287
CVE-2026-79287 affects Google Chrome (chromium-browser), specifically the Forms component. An observable discrepancy in Forms prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The CVSS 3.1 score is 5.3 (Medium) , with high attack com...
CVE-2026-78975
CVE-2026-78975 is an incorrect authorization flaw in the DOM (Document Object Model) of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , resulting in a high confidentiality impact with no integrity ...
CVE-2026-78975
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79094
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79094
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65938
Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78975
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79272
CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process can use a specially crafted HTML page to leak cross-origin data , bypassing s...
CVE-2026-79127
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79050
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79272
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79272
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78905
CVE-2026-78905 is a type confusion vulnerability in ANGLE , a component used in Google Chrome . Versions prior to 152.0.7977.65 are affected. A remote attacker can potentially execute arbitrary code outside the browser's security sandbox by enticing a user to visit a crafted HTML page . The CNA (...