29722 matches found
EUVD-2026-65958
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79070
Google Chrome versions prior to 152.0.7977.65 are vulnerable to a web origin policy bypass due to incorrect reference resolution in the Cache component. A remote attacker can exploit this by serving a crafted HTML page . The vulnerability is rated as Medium severity by Chromium. Mitigation includ...
CVE-2026-79205
A vulnerability exists in Google Chrome (prior to version 152.0.7977.65) where incorrect authorization in the Network component allows a remote attacker to bypass the web origin policy via a crafted HTML page. For Debian 12 bookworm , the issue is fixed in version 152.0.7977.75-1~deb12u1, and for...
EUVD-2026-65952
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79146
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-78949
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-78949
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79238
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-79146
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
EUVD-2026-65953
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-78949
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-79146
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
EUVD-2026-65951
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...
CVE-2026-78949
An observable discrepancy in CustomTabs within Google Chrome on Android (prior to version 152.0.7977.65) allows a local attacker to obtain cross-origin data via a co-installed application. This vulnerability, identified as an observable discrepancy (CWE-203), results in low confidentiality impact...
CVE-2026-79146
A vulnerability in Google Chrome on Android (prior to version 152.0.7977.65) allows a local attacker to obtain cross-origin data via a co-installed application. The issue is specifically located in the CustomTabs component and is classified as an information leak with a Chromium security severity...
CVE-2026-79238
A vulnerability exists in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65 ) due to incorrect authorization . This flaw allows a remote attacker to bypass the web origin policy by leveraging social engineering and a crafted Chrome extension . The Chromium security seve...