CVE-2026-78991

A race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to obtain sensitive information by enticing a user to visit a crafted HTML page. The Chromium team rated this Medium severity. The CISA SSVC assessment ...

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79116

Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78991

Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79095

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79140

A use-after-free vulnerability in Views in Google Chrome on Mac (versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The Chromium project rates the severity as Medium , while the CNA-assigned CVS...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78942

CVE-2026-78942 is a Medium -severity vulnerability (CVSS 3.1: 4.3) in the Loader component of Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution allows a remote attacker to bypass the web origin policy via crafted network traffic, requiring user interaction. Accordin...

CVE-2026-79128

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79128

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79140

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-65865

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

CVE-2026-79192 is an improper input validation flaw in the Variations component of Google Chrome prior to 152.0.7977.65 . A remote attacker can send specially crafted network traffic to potentially bypass the web origin policy , which may enable unauthorized access or actions across different web...

CVE-2026-79271

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79065

CVE-2026-79065 is an improper input validation flaw in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthoriz...

CVE-2026-78909

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...