CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65894

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79120

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65888

Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78910

A buffer overflow in the V8 JavaScript engine of Google Chrome (versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to visit a crafted HTML page. The NVD-assigned CVSS 3.1 score is 8.8 (HIGH) with user interaction requ...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79066

CVE-2026-79066 is an improper input validation vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass site isolation via a crafted HTML page, potentially enabling unauthorized access to data...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

A race condition in the Payments component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to leak cross-origin data by rendering a crafted HTML page. The Chromium security team rated this as Medium severity; the assigned C...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79066

Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79264

CVE-2026-79264 is a medium-severity vulnerability in Google Chrome prior to 152.0.7977.65 , caused by incorrect reference resolution in the Preload component . A remote attacker can bypass the web origin policy by serving a crafted HTML page, potentially allowing access to sensitive information a...

CVE-2026-79066

Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79057

A race condition in the Start component of Google Chrome on Android (prior to version 152.0.7977.65 ) allows a local attacker, leveraging social engineering and a co-installed application , to potentially execute arbitrary code outside the browser's security sandbox. Successful exploitation could...

CVE-2026-79137

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...