EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

CVE-2026-79244 is a use-after-free vulnerability in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can execute arbitrary code inside the sandbox by delivering a crafted HTML page to the user. Chromium classifies this as Low severity, while the CVSS 3.1...

CVE-2026-79246

An information leak in the DataTransfer component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The vulnerability is classified as Low severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79015

CVE-2026-79015 is an improper input validation flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions . Chromium classifies the security severity as Low . The fix is available in Chrom...

CVE-2026-78956

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

CVE-2026-79018 is an information leak in FoldableAPIs within Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this by delivering a crafted HTML page to a victim, enabling the extraction of sensitive information from the browser context. The Chromium security team rated this ...

CVE-2026-79056

A use-after-free flaw in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The CVSS 3.1 score is 9.6 (Critical) with a changed scope, requiring user inte...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements by serving a crafted HTML page to the victim. Chromium classifies the severity as Low . The affected component is the browser's...

CVE-2026-78896

CVE-2026-78896 is an information leak in the StorageAccessAPI component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw via a crafted HTML page to obtain cross-origin data . The Chromium project rates the security severity as Low . Remediation is to upd...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through a crafted HTML page . The Chromium security team rated this...

CVE-2026-78946

CVE-2026-78946 is an incorrect authorization vulnerability in the Select component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage this flaw via a crafted HTML page to bypass the web origin policy , potentially allowing cross-origin data access that would normally be bl...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79181

An observable discrepancy in the Glic component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page . The Chromium security team classified this as Low severity. No exploit or in-the-wild activity is indicated in...