CVE-2026-79103

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79230

CVE-2026-79230 is an improper input validation flaw in ANGLE , the OpenGL wrapping component of Google Chrome on macOS , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , potentially executing arbitrary code outside the ...

CVE-2026-79245

CVE-2026-79245 is a use-after-free vulnerability in the UI component of Google Chrome , affecting versions prior to 152.0.7977.65 . The flaw allows a local attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox via a local program. The CVSS v3.1 sc...

CVE-2026-78978

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79103

CVE-2026-79103 is a medium-severity flaw in the Speech component of Google Chrome prior to 152.0.7977.65 , caused by incorrect reference resolution . A remote attacker who has already compromised the renderer process can bypass site isolation by getting a user to visit a crafted HTML page, potent...

CVE-2026-78978

CVE-2026-78978 is an out-of-bounds read in ANGLE , a rendering component within Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution out...

CVE-2026-79103

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79178

Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79083

CVE-2026-79083 is an improper enforcement of behavioral workflow in the Media component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially execute arbitrary code outside the browser's security san...

CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78983

Use after free in the Views component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium security severity is rated Medium , while the NVD CVSS 3.1 s...

CVE-2026-79083

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79178

CVE-2026-79178 is an incorrect authorization flaw in the Web Authentication (Passkeys & Security Keys) component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , bypassing the web origin policy and potentially enabling un...

CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79178

Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79083

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78983

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79059

Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...