CVE-2026-79040

CVE-2026-79040 is an uninitialized resource vulnerability in the GPU component of Google Chrome on Android (affecting versions prior to 152.0.7977.65 ). A remote attacker can exploit it by enticing a user to visit a crafted HTML page , enabling memory reads outside the application sandbox , poten...

CVE-2026-79273

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79243

CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy via a crafted HTML page, potentially gaini...

CVE-2026-79098

This vulnerability affects the PermissionElement component in Google Chrome prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can craft an HTML page to misrepresent UI elements, potentially deceiving users. The Chromium security severity is Low , with a CVSS 3.1 b...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79147

CVE-2026-79147 is an information leak in the Skia graphics library within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can potentially obtain sensitive information by serving a crafted HTML page. Chromium rates this...

CVE-2026-79022

UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79098

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79233

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79233

CVE-2026-79233 is a UI misrepresentation in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 , allowing a remote attacker to spoof the address bar via a crafted HTML page. The flaw is rated Low by Chromium and carries a CVSS v3.1 score of 4.3 (Medium) with the vector AV:N/AC:L/PR:N/U...

CVE-2026-79261

CVE-2026-79261 is an incorrect authorization flaw in the Controls component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass web origin policy via a crafted HTML page. Chromium rates it Low severity; the CVSS 3.1 score is 4.3 (Medium) with a network vector, low compl...

CVE-2026-79098

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79022

UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79022

CVE-2026-79022 is a UI misrepresentation vulnerability in the Transactions Platform component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that spoofs UI elements , potentially misleading users into taking unintended actions. The...

CVE-2026-79190

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79206

CVE-2026-79206 is an out-of-bounds read in the FileSystem component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to read memory outside the sandbox via a crafted HTML page delivered through social engineering. Chromium rates the severity as Low ; CVSS 3.1 scores it 6.5 (Me...

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...