54795 matches found
CVE-2026-79014
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-79014
A race condition in Chrome's Autofill component (prior to 152.0.7977.65 ) allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page. According to Red Hat, this bypass could enable access to or manipulation of data across diff...
CVE-2026-79189
CVE-2026-79189 is an out-of-bounds write in ANGLE , a rendering component used by Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page, potentially leading to arbitrary code execution outside the browser sandbox . The CNA...
CVE-2026-79118
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79188
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79232
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
CVE-2026-79118 is an uninitialized resource vulnerability in the ANGLE component of Google Chrome (prior to 152.0.7977.65 ) and Microsoft Edge (prior to 152.0.4191.53 ). A remote attacker can exploit it by enticing a user to visit a crafted HTML page, leading to the disclosure of cross-origin dat...
CVE-2026-79188
An out-of-bounds write in ANGLE within Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. The vulnerability is rated High by Chromium and scores 9.6 (Critical) on CVSS 3.1. CIS...
CVE-2026-78900
CVE-2026-78900 is an improper input validation flaw in the Media component of Google Chrome (prior to 152.0.7977.65 ). A remote attacker can craft a malicious HTML page that, when processed by the browser, may lead to arbitrary code execution outside the sandbox , potentially compromising the use...
CVE-2026-78900
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79118
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79232
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-78900
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79188
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79174
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-79043
CVE-2026-79043 is an out-of-bounds write in ANGLE , a graphics component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by delivering a crafted HTML page , requiring user interaction but no prior authentication, potentially executing arbitrary code outside the browser ...
CVE-2026-79235
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79235
CVE-2026-79235 is a use-after-free in the WebGL component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a specially crafted HTML page , potentially leading to arbitrary code execution outside the browser's security sand...