CVE-2026-78912

CVE-2026-78912 is a UI misrepresentation vulnerability in the Browser component of Google Chrome prior to 152.0.7977.65 . A remote attacker can spoof UI elements via a crafted HTML page, potentially deceiving users. The Chromium security severity is Medium (CVSS 3.1 base score 5.4: network vector...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79020

CVE-2026-79020 is an out-of-bounds read vulnerability in Skia , the 2D graphics library used in Google Chrome and other Chromium-based browsers (including Microsoft Edge ). A remote attacker can exploit it by luring a user into processing a crafted media file , potentially allowing memory read wi...

CVE-2026-79250

CVE-2026-79250 is a UI misrepresentation vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.65 . A remote attacker can serve a crafted HTML page that spoofs the browser's address bar, potentially enabling phishing or other deceptive activities. The vulnerability requir...

CVE-2026-79250

UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78906

Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-79217

CVE-2026-79217 is an incorrect authorization flaw in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by serving a crafted HTML page to bypass system access restrictions. The CVSS v3.1 score is 4.3 (Medium) , reflecting a ...

CVE-2026-79250

UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79204

CVE-2026-79204 is a UI misrepresentation vulnerability in the Input component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page, allowing them to spoof UI elements and potentially caus...

CVE-2026-78906

Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78906

CVE-2026-78906 is a race condition in the ANGLE component of Google Chrome prior to 152.0.7977.65 , which can be triggered by a specially crafted HTML page. A remote attacker with no privileges but requiring user interaction may execute arbitrary code outside the browser sandbox , potentially lea...

CVE-2026-79051

Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79201

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79201

CVE-2026-79201 is an improper access control flaw in the Workers component of Google Chrome (Chromium) prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a crafted HTML page, potentially leading to unauthorized access to sensitive information o...

CVE-2026-79285

CVE-2026-79285 is an uninitialized resource vulnerability in ANGLE , a graphics library component used by Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker can exploit it by luring a user to visit a crafted HTML page , enabling cross-origin data disclosure (information d...