CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...

CVE-2026-79123

A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...

CVE-2026-79077

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, the attacker can exploit this flaw to gain unauthorized access to restricted parts of the system...

CVE-2026-79260

A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...

CVE-2026-79246

A flaw was found in chromium-browser. An information leak vulnerability exists in the DataTransfer component of Google Chrome. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page, leading to the disclosure of sensitive information...

CVE-2026-79055

A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...

CVE-2026-79060

A flaw was found in Google Chrome. Incorrect authorization in the StorageAccessAPI could allow a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass is achieved by using a specially crafted HTML page, potentially leading to unauthorized...

CVE-2026-78977

A flaw was found in Google Chrome. An uninitialized resource in the GPU component of Google Chrome on Android could allow a remote attacker to exploit this vulnerability. By crafting a malicious HTML page, the attacker could potentially read memory contents from within the sandbox environment,...

CVE-2026-79184

A flaw was found in Google Chrome. Missing authorization in the Preload feature allows a remote attacker, who has compromised the renderer process, to bypass the web origin policy. This can be achieved by crafting a malicious HTML page, leading to unauthorized access or actions across different w...

CVE-2026-79126

A flaw was found in Proxy in Google Chrome. An adjacent attacker could exploit this vulnerability by sending crafted network traffic, potentially leading to the disclosure of sensitive information. This issue stems from an incorrect provision of specified functionality within the Proxy component...

CVE-2026-78968

A flaw was found in Google Chrome's Core component. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially spoof the address bar by using a specially crafted HTML page. This could mislead users about the authenticity of ...

CVE-2026-79112

A flaw was found in Skia, a 2D graphics library, within Google Chrome. This out-of-bounds read vulnerability could be exploited by a remote attacker who has already compromised the browser's renderer process. By presenting a specially crafted HTML page, the attacker could read sensitive memory...

CVE-2026-79177

A flaw was found in the Media component of Google Chrome on Windows. Incorrect authorization allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access...

CVE-2026-79146

A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...

CVE-2026-79106

A flaw was found in Google Chrome. Improper input validation in the Input component allows a remote attacker, who has already compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or...

CVE-2026-79237

A flaw was found in Google Chrome's Navigation component. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions acros...

CVE-2026-79022

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit a user interface UI misrepresentation vulnerability. By crafting a malicious HTML page, the attacker could potentially spoof UI elements, which might mislead users...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...

CVE-2026-78896

A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...

CVE-2026-79250

A flaw was found in Google Chrome. A remote attacker could exploit a user interface UI misrepresentation vulnerability by enticing a victim to visit a specially crafted HTML page. This could allow the attacker to spoof the address bar, potentially leading to phishing attacks or other deceptive...