EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79246

Google Chrome and other Chromium-based browsers are affected by an information leak in DataTransfer prior to version 152.0.7977.65 . A remote attacker can exploit this vulnerability to obtain sensitive information by tricking a user into visiting a crafted HTML page . Remediation includes updatin...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66067

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66063

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

A use after free vulnerability exists in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by using a crafted HTML page to execute arbitrary code within the sandbox. This vulnerability has been addressed in various distributions, includ...

CVE-2026-79015

A vulnerability exists in the ServiceWorker mechanism of Google Chrome (prior to version 152.0.7977.65) due to improper input validation . A remote attacker could exploit this flaw by crafting a malicious HTML page to bypass system access restrictions. This issue affects the chromium package acro...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

An information leak vulnerability exists in the FoldableAPIs component of Google Chrome and Chromium prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by tricking a user into visiting a specially crafted HTML page , potentially allowing the attacker to obtain sensitive info...

CVE-2026-79015

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78956

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79056

A use-after-free vulnerability exists in the ServiceWorker component of Google Chrome (and Chromium ) prior to version 152.0.7977.65 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by enticing a user to visit a specially crafted HTML page . The vulne...

CVE-2026-78956

A type confusion vulnerability exists in the V8 engine of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this by leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. For Debian 12 bookworm , the issue is addressed in v...

CVE-2026-79015

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79239

Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66062

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79018

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66054

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...