84851 matches found
CVE-2026-78941
A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...
CVE-2026-78903
A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...
CVE-2026-78940
A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...
CVE-2026-78915
A flaw was found in Google Chrome. A race condition in the Enterprise feature on Windows could allow an adjacent attacker to potentially execute arbitrary code outside the sandbox. This vulnerability is triggered by crafted network traffic, leading to unauthorized control over the affected system...
CVE-2026-78898
An incorrect authorization flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499423269...
CVE-2026-79221
A flaw was found in Dawn, a component of Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox environment,...
CVE-2026-79234
A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...
CVE-2026-79192
A flaw was found in Google Chrome. This improper input validation vulnerability, specifically within the Variations component, could allow a remote attacker to bypass the web origin policy. This bypass is achieved by sending specially crafted network traffic, potentially leading to unauthorized...
CVE-2026-79212
A flaw was found in Google Chrome. This vulnerability, stemming from missing authorization in the Passwords component, could allow a remote attacker to bypass the web origin policy. To exploit this, the attacker would first need to compromise the browser's renderer process and employ social...
CVE-2026-79196
A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...
CVE-2026-79186
A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...
CVE-2026-79185
A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...
CVE-2026-79144
An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501759192...
CVE-2026-79137
An incorrect authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505951430...
CVE-2026-79176
A flaw was found in Google Chrome. This user interface UI misrepresentation in the Extensions feature allows a remote attacker to leverage social engineering techniques. By tricking a user into installing a specially crafted Chrome extension, the attacker can obtain sensitive information from the...
CVE-2026-79134
A flaw was found in Google Chrome's GetUserMedia component. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by tricking a user into visiting a specially crafted HTML page...
CVE-2026-79120
A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page...
CVE-2026-79107
A flaw was found in Google Chrome. Incorrect authorization within the TabGroups feature could allow a remote attacker to exploit this vulnerability. By sending crafted network traffic, an attacker could potentially leak sensitive information from the user's browser...
CVE-2026-79117
A flaw was found in WebAppInstalls in Google Chrome on Android. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a co-installed application, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or actions...