CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-66015

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78974

UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79025

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

An improper input validation vulnerability in the Media component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rated this as Medium severity, while NVD assigned a CVSS 3.1 scor...

CVE-2026-79004

CVE-2026-79004 is an out-of-bounds read in the Media component of Google Chrome prior to version 152.0.7977.65 . The flaw allowed a remote attacker who had already compromised the renderer process to read memory outside the sandbox by delivering a crafted HTML page . Chromium rated the severity a...

CVE-2026-79185

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79185

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM (Document Object Model) of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page , potentially exposing sensitive data across origins. The CNA rates it Me...

CVE-2026-79073

CVE-2026-79073 affects the Parser component of Google Chrome prior to 152.0.7977.65 . The root cause is an improper state validation flaw, which allows a remote attacker to execute arbitrary code inside the browser's security sandbox by convincing a user to visit a crafted HTML page. The Chromium...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79004

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79182

CVE-2026-79182 is an improper input validation flaw in the Media component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can deliver a crafted HTML page that, when visited by a user, may allow execution of arbitrary code outside the sandbox . The Chromium security severity i...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79004

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79139

CVE-2026-79139 is an improper input validation flaw in the Media component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to execute arbitrary code outside the browser's ...