CVE-2026-79149

CVE-2026-79149 is a use-after-free vulnerability in ANGLE , a rendering component used in Google Chrome prior to version 152.0.7977.65 . A remote attacker can trigger the flaw by delivering a crafted HTML page to the victim, leading to arbitrary code execution outside the Chrome sandbox and poten...

CVE-2026-79138

CVE-2026-79138 is an out-of-bounds write in ANGLE , a graphics rendering component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by tricking a user into visiting a crafted HTML page , potentially leading to arbitrary code execution ou...

CVE-2026-79131

CVE-2026-79131 is an out-of-bounds write vulnerability in ANGLE , a rendering component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can deliver a crafted HTML page that, once visited by a user, triggers the write and achieves arbitrary code execution outside t...

CVE-2026-79026

CVE-2026-79026 is a use-after-free vulnerability in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft a malicious Chrome extension to potentially execute arbitrary code outside the sandbox . The CVSS 3.1 score is 9.6 (Crit...

CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79048

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79189

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79198

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79240

CVE-2026-79240 is an out-of-bounds write in ANGLE (the cross-platform graphics layer) within Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can potentially execute arbitrary code inside the sandbox by serving a crafted HTML page that requires user interac...

CVE-2026-79198

CVE-2026-79198 is a use-after-free vulnerability in the Platform component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code inside the browser sandbox by luring a user into visiting a crafted HTML page. The CNA-assigned CVSS v3.1 score is...

CVE-2026-79048

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79189

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79014

A race condition in Chrome's Autofill component (prior to 152.0.7977.65 ) allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page. According to Red Hat, this bypass could enable access to or manipulation of data across diff...

CVE-2026-79240

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79048

CVE-2026-79048 is an out-of-bounds write in ANGLE , a graphics abstraction layer used in Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a crafted HTML page , potentially achieving arbitrary code execution insid...

CVE-2026-79014

Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65806

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79014

Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a rendering component used by Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page, potentially leading to arbitrary code execution outside the browser sandbox . The CNA...

CVE-2026-79118

CVE-2026-79118 is an uninitialized resource vulnerability in the ANGLE component of Google Chrome (prior to 152.0.7977.65 ) and Microsoft Edge (prior to 152.0.4191.53 ). A remote attacker can exploit it by enticing a user to visit a crafted HTML page, leading to the disclosure of cross-origin dat...