54620 matches found
CVE-2026-78952
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78952
CVE-2026-78952 is an out-of-bounds write in Crashpad within Google Chrome for Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerabili...
CVE-2026-78899
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79274
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-78954
CVE-2026-78954 is an incorrect authorization flaw in Google Chrome Extensions (versions prior to 152.0.7977.65 ). A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass the web origin policy , potentially leading to unauthorized access or actions....
CVE-2026-78904
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79027
CVE-2026-79027 is a use-after-free vulnerability in the WebRTC component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic , leading to arbitrary code execution inside the Chrome sandbox . The Chromium team rates the...
CVE-2026-78954
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79027
Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: High...
CVE-2026-79274
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79027
Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: High...
CVE-2026-78904
CVE-2026-78904 is a type confusion vulnerability in ANGLE , the graphics abstraction layer used in Google Chrome prior to 152.0.7977.65 . A remote attacker can trigger the flaw via a crafted HTML page, potentially leading to arbitrary code execution outside the browser's security sandbox . The Ch...
CVE-2026-79274
CVE-2026-79274 is an information leak in the GPU component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by serving a crafted HTML page that triggers cross-origin data exposure, allowing the attacker to obtain sensitive data from other origins. The vulnerabili...
CVE-2026-78954
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-78904
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78899
CVE-2026-78899 is a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to 152.0.7977.65 . The flaw arises from incorrect dynamic memory management: after a memory location is freed, the pointer is not cleared, allowing an attacker to manipulate the program. A remote a...
CVE-2026-78899
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79149
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
