CVE-2026-79263

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-79263

A race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium rates the severity as Low , while the CVSS 3.1 score is 8.1 (HIGH) with a high attack complexity but no...

CVE-2026-79184

CVE-2026-79184 is a missing authorization flaw in the Preload feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , leading to unauthorized access or actions a...

CVE-2026-79263

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-79077

CVE-2026-79077 is an incorrect authorization flaw in WebProtect , a component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass system access restrictions , resulting in low integrity impact. Chromium rates the severity as Low ; the CVSS...

CVE-2026-79077

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79001

CVE-2026-79001 is an information leak in the Bluetooth component of Google Chrome on Mac , fixed in version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information via a crafted HTML page. Chromium rates ...

CVE-2026-79077

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79001

Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79184

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79289

Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79124

Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79266

CVE-2026-79266 is a Use-After-Free (CWE-416) in the DevTools component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can use a crafted Chrome extension to execute arbitrary code inside the Chrome sandbox . The CNA assigns CVSS 8.8...

CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79055

CVE-2026-79055 is an information leak in the Sharing feature of Google Chrome on Android prior to 152.0.7977.65 . A local attacker, leveraging social engineering, can exploit this flaw through a co-installed application to obtain sensitive information. Chromium rates the severity as Low ; the CVS...

CVE-2026-78974

CVE-2026-78974 is a UI misrepresentation vulnerability in the Linux Toolkit Theming component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could use a crafted HTML page to bypass system access restrictions. Chromium classifies th...

CVE-2026-79025

Google Chrome prior to 152.0.7977.65 contains an improper input validation vulnerability in the Workers component. A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page . Chromium rates the severity as Medium . Th...

CVE-2026-79141

CVE-2026-79141 is an incorrect authorization vulnerability in the Google Chrome browser, affecting versions prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitiv...