CVE-2026-79052

CVE-2026-79052 is a use-after-free vulnerability in Aura , a component within Google Chrome prior to version 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can exploit this by convincing a user to visit a crafted HTML page , potentially leading to arbitrary code executio...

CVE-2026-79290

A use after free vulnerability in the Aura component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The bug was internally reported by Google on 2026-05-25 (Chromium bug 5164...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79054

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79054

CVE-2026-79054 is a use-after-free vulnerability in the Chromecast component of Google Chrome, rated Critical by Chromium and 8.3 HIGH (CVSS v3.1). An attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code outsid...

CVE-2026-79121

CVE-2026-79121 is a Critical improper input validation vulnerability in the Chromecast component of Google Chrome, fixed in version 152.0.7977.65 (152.0.7977.64 for Linux). An attacker who has already compromised the renderer process can trigger a sandbox escape via a crafted HTML page, achieving...

CVE-2026-79224

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79224

CVE-2026-79224 is a use-after-free vulnerability in the Chromecast component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbo...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-81569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Skia is a 2D...

PT-2026-81780

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Network component. A remote attacker who has already compromised the renderer process can obtain sensitive information by using a crafted HTML page...

PT-2026-81701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Chromecast allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HT...

PT-2026-81757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free ...

PT-2026-81820

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Cookies allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin policy...

PT-2026-81833

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the GPU allows a remote attacker to obtain cross-origin data, which is data from a different origin than the one serving the page, by using a crafted HTML page...

PT-2026-81624

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Extensions that allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to...

PT-2026-81648

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...