EUVD-2026-66072

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79125

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-79045

CVE-2026-79045 is a type confusion flaw in the V8 JavaScript engine within Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by luring a user (via social engineering) into visiting a crafted HTML page, allowing memory reads inside the browser sandbox and potential informatio...

CVE-2026-79125

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79045

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-79045

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79125

CVE-2026-79125 is an information leak in the XR (WebXR) component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to obtain sensitive information via a crafted HTML page. The underlying root cause is not further detailed beyond "information leak in XR." Google rates the Chrom...

CVE-2026-79223

CVE-2026-79223 is an integer overflow in Chromium within Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to read memory inside the sandbox by tricking a user into opening a specially crafted file . The Chromium security team rates the severity as Low , while the CNA-assigned CVS...

CVE-2026-79197

A use-after-free flaw in the V8 JavaScript engine within Google Chrome versions prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The vulnerability is rated Chromium severity: Low but carries a CVSS 3.1 score of 8.8 (HIGH)...

EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79112

CVE-2026-79112 is an out-of-bounds read in Skia , a 2D graphics library used by Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory inside the browser's security sandbox. Chro...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78947

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...