CVE-2026-79106

Google Chrome prior to 152.0.7977.65 contains an improper input validation flaw in the Input component. A remote attacker who has already compromised the renderer process and leverages social engineering can bypass the web origin policy via a crafted HTML page. Red Hat notes this could lead to un...

CVE-2026-78961

Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78961

CVE-2026-78961 is an incorrect authorization flaw in the Core component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process and leverages social engineering can bypass the web origin policy via a crafted HTML page, potentially acc...

EUVD-2026-65837

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65838

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78958

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78961

Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79262

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79106

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79088

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79104

Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79088

CVE-2026-79088 is an incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions , resulting in high integrity impact (CVSS 3.1 score: 6...

CVE-2026-79076

CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by sending crafted network traffic to obtain sensitive information, with no privileges required but user interac...

CVE-2026-79088

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79044

Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79104

CVE-2026-79104 is a missing authorization flaw in the Sensor component of Google Chrome prior to version 152.0.7977.65 . An attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information , resulting in high confidentiality impact...

CVE-2026-79104

Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79076

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79076

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is rated Medium by Chromium and scores 7.5 (High)...