CVE-2026-79146

An information leak in CustomTabs in Google Chrome for Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed application. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, no privileges required, user interaction required, and a high i...

CVE-2026-79291

CVE-2026-79291 is an information leak in the CSS engine of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , with no privileges required but user interaction necessary. The flaw is rated Medium (CVSS 3.1 bas...

CVE-2026-79291

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79242

An observable discrepancy in HTML processing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The Chromium team rated the severity as Medium (CVSS 5.3: network vector, high complexity, user interaction required, high...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79242

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79242

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79293

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79293

An information leak in the Animation component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information by visiting a crafted HTML page . The vulnerability is rated Medium severity (CVSS 3.1: 6.5 ) with a network attack vector, no privileges requir...

CVE-2026-79023

CVE-2026-79023 is an incorrect authorization flaw in the Editing component of Google Chrome prior to 152.0.7977.65 (also affecting chromium-browser ). A remote attacker can obtain sensitive information by persuading a user to open a crafted HTML page. The flaw carries a CVSS 3.1 score of 6.5 (Med...

CVE-2026-79023

Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79293

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79193

CVE-2026-79193 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , enabling the leak of cross-origin data to a victim who interacts with the page. The flaw is rated Medium severity by both ...

CVE-2026-79024

CVE-2026-79024 is an information leak in the ServiceWorker component of Google Chrome (Chromium), affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page , enabling the theft of sensitive user information. The C...

CVE-2026-79024

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79024

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78975

CVE-2026-78975 is an incorrect authorization flaw in the DOM (Document Object Model) of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by enticing a user to visit a crafted HTML page , resulting in a high confidentiality impact with no integrity ...