CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in the Back-Forward Cache (BFCache) component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass system access restrictions . The Chromium se...

EUVD-2026-65921

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78912

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78912

CVE-2026-78912 is a UI misrepresentation vulnerability in the Browser component of Google Chrome prior to 152.0.7977.65 . A remote attacker can spoof UI elements via a crafted HTML page, potentially deceiving users. The Chromium security severity is Medium (CVSS 3.1 base score 5.4: network vector...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79241

CVE-2026-79241 is an out-of-bounds read in the GPU component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by tricking a user into visiting a crafted HTML page, enabling memory reads outside the browser's security sandbox and potentiall...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79020

CVE-2026-79020 is an out-of-bounds read vulnerability in Skia , the 2D graphics library used in Google Chrome and other Chromium-based browsers (including Microsoft Edge ). A remote attacker can exploit it by luring a user into processing a crafted media file , potentially allowing memory read wi...

CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79250

CVE-2026-79250 is a UI misrepresentation vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.65 . A remote attacker can serve a crafted HTML page that spoofs the browser's address bar, potentially enabling phishing or other deceptive activities. The vulnerability requir...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79217

CVE-2026-79217 is an incorrect authorization flaw in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by serving a crafted HTML page to bypass system access restrictions. The CVSS v3.1 score is 4.3 (Medium) , reflecting a ...

CVE-2026-79250

UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79020

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-78906

Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78906

CVE-2026-78906 is a race condition in the ANGLE component of Google Chrome prior to 152.0.7977.65 , which can be triggered by a specially crafted HTML page. A remote attacker with no privileges but requiring user interaction may execute arbitrary code outside the browser sandbox , potentially lea...

CVE-2026-79204

CVE-2026-79204 is a UI misrepresentation vulnerability in the Input component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page, allowing them to spoof UI elements and potentially caus...