CVE-2026-79185

A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...

CVE-2026-79144

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501759192...

CVE-2026-79120

A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page...

CVE-2026-79117

A flaw was found in WebAppInstalls in Google Chrome on Android. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a co-installed application, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or actions...

CVE-2026-79095

A flaw was found in Chromium. This vulnerability, located in the Payments component, allows a remote attacker to obtain sensitive cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to an information leak...

CVE-2026-79118

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-79085

A flaw was found in Chromium's Network component. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across...

CVE-2026-79084

A flaw was found in Google Chrome's Notifications component. This vulnerability, caused by inadequate encryption strength, allows a remote attacker to bypass the web origin policy. By leveraging social engineering with a crafted HTML page, an attacker can exploit this flaw, potentially leading to...

CVE-2026-79082

A flaw was found in the Transactions Platform of Google Chrome. An attacker who has compromised the renderer process could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow them to bypass the web origin policy, potentially leading to unauthorized...

CVE-2026-79285

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure...

CVE-2026-79267

A flaw was found in chromium-browser. A race condition in the Workers component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This bypass was achieved by tricking a user into opening a specially crafted HTML page, potentially leading...

CVE-2026-79255

A flaw was found in WebRTC, a real-time communication component within Chromium. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by tricking the user into visiting...

CVE-2026-79252

A flaw was found in the ServiceWorker component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other websites cross-origin...

CVE-2026-79248

A flaw was found in Google Chrome. This incorrect authorization in the Input component allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by presenting a specially crafted HTML page, leading to a security boundary...

CVE-2026-79068

A flaw was found in Google Chrome's StreamsAPI. A remote attacker could exploit improper resource exposure by crafting a malicious HTML page. This could potentially allow the attacker to bypass the web origin policy and gain access to a privileged page...

CVE-2026-79065

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to...

CVE-2026-79051

A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79014

A flaw was found in Chromium's Autofill component. This race condition allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable the attacker to access or manipulate data from different web origins, potentially leading to...

CVE-2026-79010

A flaw was found in Google Chrome's Network component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by performing an operation on a resource after it had expired or been released. This could be triggered via a crafted HTML page, allowing th...

CVE-2026-78954

A flaw was found in Google Chrome's Extensions. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved through a crafted HTML page, potentially leading to unauthorized access or...