82557 matches found
CVE-2026-79065
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78909
A use after free vulnerability in the Views component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker, leveraging social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rates the severity as Medium , while the CVSS 3.1 base sco...
CVE-2026-78909
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65863
Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79065
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78990
CVE-2026-78990 is a use-after-free vulnerability in the Compositing component of Google Chrome prior to 152.0.7977.65 . A remote attacker can execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. The NVD-assigned CVSS 3.1 score is 8.8 (HIGH) , with user intera...
CVE-2026-78937
Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79210
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78987
CVE-2026-78987 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass the web origin policy via a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information . The CVSS v3.1 score is ...
CVE-2026-79129
Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...
CVE-2026-79210
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78987
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78987
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79129
CVE-2026-79129 is a use-after-free vulnerability in the Sessions component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can achieve arbitrary code execution outside the sandbox via UI interaction. The CNA-assigned CVSS 3...
CVE-2026-79210
A use after free vulnerability in the Audio component of Google Chrome on Android (prior to 152.0.7977.65 ) allowed a remote attacker who had already compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS v3.1 score is 8.3 (High) with a ch...
CVE-2026-79210
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79046
A race condition in the Permissions component of Google Chrome on Android (prior to 152.0.7977.65 ) allows a remote attacker, leveraging social engineering with a crafted HTML page, to bypass the web origin policy , potentially leading to unauthorized access. The vulnerability carries a CVSS 4.3 ...
CVE-2026-79237
An incorrect authorization flaw in the Navigation component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. According to Red Hat, this could lead to unauthorized access to sensitive info...
CVE-2026-78985
Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in its FileSystem component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , potentially executing arbitrary code outside the browser's security sandbox...