CVE-2026-79075

Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome (Chromium) prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. According to the Red Hat advisory, this can potentially lead to a compromise of the affected...

CVE-2026-79033

Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78962

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79252

CVE-2026-79252 is an information leak in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain cross-origin data by enticing a user to visit a crafted HTML page . The underlying flaw allows data from other origins to be leaked through the ServiceWorker...

CVE-2026-79258

Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79258

An incorrect authorization flaw in WebXR within Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted HTML page, to obtain cross-origin data . The CVSS 3.1 score is 6.5 (Medium) , with a high confidentiality impact but no integrity or availabi...

CVE-2026-79265

CVE-2026-79265 is an incomplete cleanup vulnerability in the GetUserMedia component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage social engineering and a crafted HTML page to obtain sensitive information . Chromium rat...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78951

A use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. Chromium classifies the severity as Medium , while the NVD/CNA-assigned C...

CVE-2026-79134

Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78978

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79205

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

CVE-2026-78959 affects the FileSystem component in Google Chrome prior to 152.0.7977.65 . The root cause is improper handling of case sensitivity, allowing a remote attacker who leverages social engineering to bypass system access restrictions by getting a user to visit a crafted HTML page. The C...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78903

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79283

CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could spoof UI elements by serving a crafted HTML page, potentially deceiving users. The flaw carries a Chromium severity of Medium with a CVSS 3.1 ...

CVE-2026-79291

CVE-2026-79291 is an information leak in the CSS engine of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , with no privileges required but user interaction necessary. The flaw is rated Medium (CVSS 3.1 bas...