CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79087

An injection vulnerability in Chrome Tabs affected Google Chrome prior to 152.0.7977.65 and Microsoft Edge (Chromium-based) . A remote attacker could potentially bypass system access restrictions by serving a crafted HTML page that a user must interact with. The vulnerability is rated Medium (CVS...

CVE-2026-79248

CVE-2026-79248 is an incorrect authorization flaw in the Input component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy (security boundary evasion) by presenting a specially crafted HTML page. The flaw ...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65875

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78891

CVE-2026-78891 is a buffer overflow in the WebRTC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this by luring a user to a crafted HTML page , leading to arbitrary code execution inside the Chrome sandbox , potentially resulting in unauthorized control ...

CVE-2026-79031

Improper resource exposure in the Preload component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Site isolation is a security feature designed to protect against data theft and malicious code execution between websites. The vu...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

CVE-2026-79110 is a missing authorization vulnerability in the Preload component of Google Chrome (prior to version 152.0.7977.65 ). A remote attacker can bypass the web origin policy by tricking a user into opening a specially crafted HTML page, potentially leading to unauthorized access to sens...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

CVE-2026-79136 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 , rated Medium by Chromium (CVSS 3.1: 4.3, requiring user interaction). A remote attacker can bypass the web origin policy by luring a user into visiting a crafted HTML page. T...

CVE-2026-78891

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78891

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79116

Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...