SUSE CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

GLSA-202608-29 : Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-29 Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced...

PT-2026-82808

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

GLSA-202608-28 : Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-28 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced...

CVE-2026-5704

creationtimestamp| type| source ---|---|--- 2026-08-26 22:40:09+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mtzfnd3gcu2n 2026-08-26 22:40:12+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mtzfndatp327 2026-08-26 22:40:13+00:00| seen|...

CVE-2026-19485

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...

EUVD-2026-66653

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...

Exploit for Use After Free in Google Android

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-...

CVE-2026-79276

A flaw was found in Google Chrome's FileSystem component. This improper privilege management vulnerability allows a remote attacker, leveraging social engineering, to bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page...

CVE-2026-79258

A flaw was found in WebXR within Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, to obtain sensitive cross-origin data. This could lead to unauthorized information disclosure...

CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...

CVE-2026-79123

A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...

CVE-2026-79077

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, the attacker can exploit this flaw to gain unauthorized access to restricted parts of the system...

CVE-2026-79260

A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...

CVE-2026-79246

A flaw was found in chromium-browser. An information leak vulnerability exists in the DataTransfer component of Google Chrome. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page, leading to the disclosure of sensitive information...

CVE-2026-79055

A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...

CVE-2026-79060

An incorrect authorization flaw was found in the StorageAccessAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519254827...

CVE-2026-78977

A flaw was found in Google Chrome. An uninitialized resource in the GPU component of Google Chrome on Android could allow a remote attacker to exploit this vulnerability. By crafting a malicious HTML page, the attacker could potentially read memory contents from within the sandbox environment,...

CVE-2026-79184

A flaw was found in Google Chrome. Missing authorization in the Preload feature allows a remote attacker, who has compromised the renderer process, to bypass the web origin policy. This can be achieved by crafting a malicious HTML page, leading to unauthorized access or actions across different w...

CVE-2026-79126

A flaw was found in Proxy in Google Chrome. An adjacent attacker could exploit this vulnerability by sending crafted network traffic, potentially leading to the disclosure of sensitive information. This issue stems from an incorrect provision of specified functionality within the Proxy component...