CVE-2026-79070

CVE-2026-79070 is a Medium -severity vulnerability in Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution in the browser's Cache component allows a remote attacker to bypass the web origin policy by convincing a user to visit a crafted HTML page, potentially leading t...

CVE-2026-78892

An incorrect authorization flaw in the Chromoting component of Google Chrome on Windows prior to 152.0.7977.65 allows a local attacker to bypass system access restrictions by executing a local program. The Chromium security severity is Medium , while NVD assigns CVSS 3.1: 7.1 (HIGH) with a local ...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79283

CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could spoof UI elements by serving a crafted HTML page, potentially deceiving users. The flaw carries a Chromium severity of Medium with a CVSS 3.1 ...

CVE-2026-78949

CVE-2026-78949 affects the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . The root cause is an observable discrepancy in CustomTabs that allows a local attacker to obtain cross-origin data by exploiting a co-installed application. The impact is limited to unauthorized i...

CVE-2026-79238

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering and a crafted Chrome extension , to bypass the web origin policy. Per Red Hat, this bypass could lead to unauthorized access to sensitive ...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79291

CVE-2026-79291 is an information leak in the CSS engine of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , with no privileges required but user interaction necessary. The flaw is rated Medium (CVSS 3.1 bas...

CVE-2026-79146

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79291

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79291

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65952

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79242

An observable discrepancy in HTML processing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The Chromium team rated the severity as Medium (CVSS 5.3: network vector, high complexity, user interaction required, high...