CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79004

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79139

Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79083

CVE-2026-79083 is an improper enforcement of behavioral workflow in the Media component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially execute arbitrary code outside the browser's security san...

CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome (Chromium) prior to 152.0.7977.65 , allowing a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page . The Chromium security team rates this as Medium severity, while...

CVE-2026-78900

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78900

CVE-2026-78900 is an improper input validation flaw in the Media component of Google Chrome (prior to 152.0.7977.65 ). A remote attacker can craft a malicious HTML page that, when processed by the browser, may lead to arbitrary code execution outside the sandbox , potentially compromising the use...

PT-2026-81791

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the Media component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing a user to visit a specially crafted HTML pag...

PT-2026-81742

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Media component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow vulnerability in Google Chrome’s Media component on Linux, prior to version 88.0.4324.182, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 99.0.4844.51, using "After Free" in the Media section of Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Media component in Google Chrome before version 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Chromium: CVE-2026-76035 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

DEBIAN-CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...