CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79122

Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79122

CVE-2026-79122 is an information leak in the SignIn component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information via crafted network traffic , without requiring user interaction or prior authentication. The CVSS 3.1 score is 5.9 (Medium) with high impact ...

CVE-2026-79107

Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79107

CVE-2026-79107 is an incorrect authorization flaw in the TabGroups feature of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic that requires user interaction, potentially leaking sensitive information from the user's browser. The CVSS 3.1 ...

CVE-2026-79107

Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79006

CVE-2026-79006 is a protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker to bypass the web origin policy via crafted network traffic. The CVSS 3.1 score is 4.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S...

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78942

CVE-2026-78942 is a Medium -severity vulnerability (CVSS 3.1: 4.3) in the Loader component of Google Chrome prior to version 152.0.7977.65 . An incorrect reference resolution allows a remote attacker to bypass the web origin policy via crafted network traffic, requiring user interaction. Accordin...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79192

CVE-2026-79192 is an improper input validation flaw in the Variations component of Google Chrome prior to 152.0.7977.65 . A remote attacker can send specially crafted network traffic to potentially bypass the web origin policy , which may enable unauthorized access or actions across different web...

EUVD-2026-65865

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79076

CVE-2026-79076 is an improper input validation flaw in the Sync component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit the vulnerability by sending crafted network traffic to obtain sensitive information, with no privileges required but user interac...

CVE-2026-79076

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79027

CVE-2026-79027 is a use-after-free vulnerability in the WebRTC component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic , leading to arbitrary code execution inside the Chrome sandbox . The Chromium team rates the...

CVE-2026-79027

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-79027

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: High...