CVE-2026-78915

A race condition in the Enterprise component of Google Chrome on Windows (prior to 152.0.7977.65 ) allows an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. The vulnerability is rated CVSS 7.5 (High) under CVSS 3.1, though Chromium's intern...

CVE-2026-79126

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...

CVE-2026-79126

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. Chromium security severity: Low...

CVE-2026-79126

CVE-2026-79126 is an incorrect provision of specified functionality in the Proxy component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . An adjacent attacker can exploit this by sending crafted network traffic , potentially obtaining sensitive information . Chromium ra...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-79000

CVE-2026-79000 is an improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass the web origin policy by sending crafted network traffic, potentially leading to unauthorized access...

CVE-2026-79263

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-79263

A race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium rates the severity as Low , while the CVSS 3.1 score is 8.1 (HIGH) with a high attack complexity but no...

CVE-2026-79263

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78913

A use-after-free vulnerability in the Chromoting component of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates the severity as Medium , while NVD assigns a CVSS 3.1 base score of ...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79013

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79013

CVE-2026-79013 is an improper input validation flaw in the Sync component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to obtain sensitive information via crafted network traffic. The Chromium security severity is Medium , with a CVSS v3.1 score of 5.9 (AV:N/AC:H/PR:N/UI:N...

CVE-2026-79013

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79208

CVE-2026-79208 is a missing authorization flaw in the HTTP2 protocol handling of Google Chrome prior to version 152.0.7977.65 . A remote attacker with no privileges required can craft specific network traffic to leak sensitive information , though the attack is rated high complexity and is not co...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79122

CVE-2026-79122 is an information leak in the SignIn component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information via crafted network traffic , without requiring user interaction or prior authentication. The CVSS 3.1 score is 5.9 (Medium) with high impact ...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...