29596 matches found
CVE-2026-79190
A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...
CVE-2026-79123
A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...
CVE-2026-79260
A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...
CVE-2026-79243
A flaw was found in Google Chrome's ReadingList component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable unauthorized access to data or functionality that should be...
CVE-2026-79060
An incorrect authorization flaw was found in the StorageAccessAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519254827...
CVE-2026-79184
A flaw was found in Google Chrome. Missing authorization in the Preload feature allows a remote attacker, who has compromised the renderer process, to bypass the web origin policy. This can be achieved by crafting a malicious HTML page, leading to unauthorized access or actions across different w...
CVE-2026-79146
A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...
CVE-2026-79106
A flaw was found in Google Chrome. Improper input validation in the Input component allows a remote attacker, who has already compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or...
CVE-2026-79237
An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499068536...
CVE-2026-78958
An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497205529...
CVE-2026-78896
A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...
CVE-2026-79274
A flaw was found in chromium-browser. A remote attacker could exploit a vulnerability in the GPU component by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other origins...
CVE-2026-79272
A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...
CVE-2026-79264
A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Preload component, allows a remote attacker to bypass the web origin policy. By crafting a malicious HTML page, an attacker could potentially access sensitive information or perform unauthorized...
CVE-2026-79238
A flaw was found in ServiceWorker in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, to bypass the web origin policy. Bypassing the web origin policy could lead to unauthorized...
CVE-2026-79262
A flaw was found in Google Chrome. Incorrect authorization in the Network component allowed a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This bypass could enable an attacker to access restricted resources or data from other origins, potentially leading to...
CVE-2026-79059
A flaw was found in Chromium's Back-Forward Cache BFCache component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive...
CVE-2026-79070
A flaw was found in Google Chrome. Incorrect reference resolution within the browser's cache allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive informatio...
CVE-2026-79034
A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS. This vulnerability allows the attacker to leak sensitive cross-origin data by tricking a user into visiting a specially crafte...