84852 matches found
CVE-2026-79232
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78900
CVE-2026-78900 is an improper input validation flaw in the Media component of Google Chrome (prior to 152.0.7977.65 ). A remote attacker can craft a malicious HTML page that, when processed by the browser, may lead to arbitrary code execution outside the sandbox , potentially compromising the use...
CVE-2026-78900
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79188
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79235
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79235
CVE-2026-79235 is a use-after-free in the WebGL component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution outside the browser's security sand...
CVE-2026-79043
CVE-2026-79043 is an out-of-bounds write in ANGLE , a graphics component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by delivering a crafted HTML page , requiring user interaction but no prior authentication, potentially executing arbitrary code outside the browser ...
CVE-2026-78948
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78895
Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79235
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79043
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78895
An information leak in the Paint component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. The Red Hat advisory further notes this could lead to unauthorized access to sensitive information . The CVSS v3.1 base sco...
CVE-2026-78948
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78908
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-78908
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79043
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78908
An information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by tricking a user into opening a crafted HTML page. This can lead to exposure of sensitive data across origins. The NVD-assigned CVSS v3.1 score is 4.3 (Me...
CVE-2026-78948
A buffer overflow in the WebGL component of Google Chrome (affecting versions prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The Chromium security severity is High, with a CVSS 3.1 score of 9.6 (CRIT...