311528 matches found
CVE-2026-79028
Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78941
CVE-2026-78941 is an information leak in the Core component of Google Chrome , affecting versions prior to 152.0.7977.65 . The vulnerability allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page, potentially exposing cross-orig...
CVE-2026-78941
Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79016
CVE-2026-79016 is an observable discrepancy in SVG handling in Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to obtain cross-origin data , violating the same-origin policy. Chromium assigns it a Medium security severity. The fix is included in...
CVE-2026-79176
Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation in the Extensions feature. A remote attacker can leverage social engineering to trick a user into installing a specially crafted Chrome extension , allowing them to obtain sensitive information from the user's browser. The...
CVE-2026-79176
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79176
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-65838
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79076
CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by sending crafted network traffic to obtain sensitive information, with no privileges required but user interac...
CVE-2026-79104
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79044
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79044
A missing authorization flaw in the WebAppInstalls component of Google Chrome on Android (prior to 152.0.7977.65 ) allowed a remote attacker who had already compromised the renderer process to obtain sensitive information via a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score ...
CVE-2026-79104
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79104
CVE-2026-79104 is a missing authorization flaw in the Sensor component of Google Chrome prior to version 152.0.7977.65 . An attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain sensitive information , resulting in high confidentiality impact...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78893
CVE-2026-78893 is an information disclosure vulnerability in the QUIC (Quick UDP Internet Connections) implementation of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit the flaw by enticing a user to visit a crafted HTML page , leading to the leakage of sensitive info...