CVE-2026-79201

CVE-2026-79201 is an improper access control flaw in the Workers component of Google Chrome (Chromium) prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a crafted HTML page, potentially leading to unauthorized access to sensitive information o...

CVE-2026-79285

CVE-2026-79285 is an uninitialized resource vulnerability in ANGLE , a graphics library component used by Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker can exploit it by luring a user to visit a crafted HTML page , enabling cross-origin data disclosure (information d...

CVE-2026-79051

CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , resulting in a web origin policy bypass . The CVSS 3.1 base score is 4.3 (Medium) , with ...

CVE-2026-79285

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65914

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation by presenting a crafted HTML page to the victi...

CVE-2026-79132

CVE-2026-79132 is an improper input validation flaw in the Input component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to escape the sandbox and execute arbitrary co...

CVE-2026-79201

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79285

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79074

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79013

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79215

Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79049

Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79199

CVE-2026-79199 is an incorrect authorization vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium security team rated it Medium severity (CVSS 3.1: 4.3, AV:N/AC:L/PR:N...

CVE-2026-79049

An incorrect reference resolution flaw in the Passwords component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a specially crafted file. Per Red Hat, this could lead to unauthorized access to sensitive system resources . The CV...

CVE-2026-79074

CVE-2026-79074 is an information leak in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can craft a malicious HTML page to obtain sensitive information from the browser. The CVSS 3.1 score is 5.3 (Medium) , with h...

CVE-2026-79049

Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79199

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79215

Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79199

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...