CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79067

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows them to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-79049

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Passwords component, allows a remote attacker to bypass system access restrictions by providing a specially crafted file. This could lead to unauthorized access to sensitive system resources...

CVE-2026-79043

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79051

A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79013

An improper input validation flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513737209...

CVE-2026-79010

A flaw was found in Google Chrome's Network component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by performing an operation on a resource after it had expired or been released. This could be triggered via a crafted HTML page, allowing th...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78978

A flaw was found in ANGLE, a component within Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-78954

A flaw was found in Google Chrome's Extensions. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved through a crafted HTML page, potentially leading to unauthorized access or...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78961

A flaw was found in Google Chrome's core functionality. A remote attacker, who has already compromised a part of the browser responsible for rendering web content the renderer process and used social engineering tactics, could bypass the security mechanism that isolates content from different...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...

CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

CVE-2026-78905

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

CVE-2026-79230

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

CVE-2026-79232

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to exploit memory corruption by crafting a malicious HTML page. Successful exploitation can potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79219

A flaw was found in Google Chrome's Bluetooth component. This use-after-free vulnerability, a type of memory corruption, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering techniques and a specially...