CVE-2026-79257

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79039

A use-after-free vulnerability in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 , allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. The Chromium security severity is High , with a CVSS 3.1 base score of 8...

CVE-2026-78934

A race condition in the ReadAloud component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to execute arbitrary code inside the browser sandbox . The vulnerability was reported by Google on 2026-05-28 and fixed in ...

CVE-2026-79011

CVE-2026-79011 is a UI misrepresentation vulnerability in the Browser component of Google Chrome prior to 152.0.7977.65 , rated High (CVSS 8.1). A remote attacker leveraging social engineering could bypass system access restrictions via a crafted HTML page, with impacts to confidentiality and int...

CVE-2026-78934

Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-78911

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78986

CVE-2026-78986 is an uninitialized resource in the GPU subsystem of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially obtain cross-origin data via a crafted HTML page. Chromium rates it High severity, while the CNA-...

CVE-2026-78911

CVE-2026-78911 is an incorrect authorization flaw in the USB component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the sandbox via a crafted H...

CVE-2026-78986

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-78911

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79039

Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65775

Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65773

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-78986

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-78934

Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79039

Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-79292

CVE-2026-79292 is an integer overflow in the Chromecast component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox , rated High severity by Chromium and 8.3...

CVE-2026-79219

A use-after-free memory corruption in the Bluetooth component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the browser sandbox by leveraging social engineering and a crafted Chrome extension . The bug was reported by Google on 2026-05-27 (Chro...