CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-63599

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76019

CVE-2026-76019 is an incorrect authorization vulnerability in the Workers component of Google Chrome prior to 151.0.7922.173 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass the web origin policy via a crafted HTML page. The CVSS 3.1...

CVE-2026-76018

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-76019

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

EUVD-2026-63594

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-76019

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-76018

CVE-2026-76018 is a privilege elevation vulnerability in the Import component of Google Chrome prior to 151.0.7922.173 (Windows/Mac) and 151.0.7922.173 (Linux). A remote attacker leveraging social engineering can potentially execute arbitrary code outside the sandbox via a crafted file. The vulne...

CVE-2026-76018

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-76019

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-63595

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

EUVD-2026-63596

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. Thes...

PT-2026-79129

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A use after free issue in the DOM allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to open a crafted HTML page. Use after free is a memory...

PT-2026-79130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A buffer overflow in the Network component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. A buffer overflow...

PT-2026-79131

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Improper resource control in Linux Toolkit Theming allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HT...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

PT-2026-79127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Incorrect authorization in Workers allows a remote attacker who has compromised the renderer process and used social engineering to bypass the web origin policy through a crafted HTML...