CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79107

CVE-2026-79107 is an incorrect authorization flaw in the TabGroups feature of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic that requires user interaction, potentially leaking sensitive information from the user's browser. The CVSS 3.1 ...

CVE-2026-79038

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79086

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-79107

Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79038

An incorrect authorization flaw in the WebProtect component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. The attack requires user interaction but no prior access, with a CVS...

CVE-2026-79120

CVE-2026-79120 is an uninitialized resource vulnerability in ANGLE , a graphics rendering component used by Google Chrome and Chromium-based Microsoft Edge . In Chrome versions prior to 152.0.7977.65 , a remote attacker can potentially obtain cross-origin data by enticing a user to visit a crafte...

EUVD-2026-65891

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255

An improper input validation flaw in WebRTC within Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page. Red Hat elaborates that this bypass could lead to unauthorized access to sensi...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65894

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...

EUVD-2026-65888

Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78910

A buffer overflow in the V8 JavaScript engine of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to visit a crafted HTML page. The NVD-assigned CVSS 3.1 score is 8.8 (HIGH) with user interaction requ...