CVE-2026-79097

A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome (Chromium) prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. According to the Red Hat advisory, this can potentially lead to a compromise of the affected...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79203

Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78901

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79033

CVE-2026-79033 affects Google Chrome DevTools prior to version 152.0.7977.65 , caused by insufficient control flow management . A remote attacker leveraging social engineering can potentially execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is rate...

CVE-2026-78901

A race condition in the V8 JavaScript engine in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. The Chromium project rates the vulnerability as Medium severity, while the CVSS 3.1 score is ...

CVE-2026-78901

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

CVE-2026-78962 is an uninitialized resource vulnerability in the WebXR component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that potentially leaks cross-origin data , exposing confidential information from ...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78913

A use-after-free vulnerability in the Chromoting component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates the severity as Medium , while NVD assigns a CVSS 3.1 base score of ...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, bypassing system access restrictions . The vulnerabili...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...