4786 matches found
CVE-2026-79154
CVE-2026-79154 is a missing authorization flaw in DevTools in Google Chrome prior to version 152.0.7977.65 . A remote attacker, by leveraging social engineering and user interface interaction , can obtain sensitive information. The CVSS 3.1 score is 6.5 (Medium) with a network attack vector and h...
CVE-2026-78944
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79070
Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79283
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79180
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79094
A race condition in the Workers component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass system access restrictions by serving a crafted HTML page. The flaw is rated Medium severity (CVSS 6.5: network vector, low complexity, user interaction required, high integrity im...
CVE-2026-79241
Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78912
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79250
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79049
Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...
CVE-2026-79120
CVE-2026-79120 is an uninitialized resource vulnerability in ANGLE , a graphics rendering component used by Google Chrome and Chromium-based Microsoft Edge . In Chrome versions prior to 152.0.7977.65 , a remote attacker can potentially obtain cross-origin data by enticing a user to visit a crafte...
CVE-2026-78894
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79264
Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78969
Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79006
CVE-2026-79006 is a protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker to bypass the web origin policy via crafted network traffic. The CVSS 3.1 score is 4.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S...
CVE-2026-78942
Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-78990
Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79237
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78966
An externally controlled reference in the QUIC protocol within Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. Red Hat notes the bypass could lead to unauthorized access to sensitive data or actions wit...