CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

EUVD-2026-65953

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

EUVD-2026-65951

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146

A vulnerability in Google Chrome on Android (prior to version 152.0.7977.65) allows a local attacker to obtain cross-origin data via a co-installed application. The issue is specifically located in the CustomTabs component and is classified as an information leak with a Chromium security severity...

CVE-2026-78949

An observable discrepancy in CustomTabs within Google Chrome on Android (prior to version 152.0.7977.65) allows a local attacker to obtain cross-origin data via a co-installed application. This vulnerability, identified as an observable discrepancy (CWE-203), results in low confidentiality impact...

CVE-2026-79238

A vulnerability exists in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65 ) due to incorrect authorization . This flaw allows a remote attacker to bypass the web origin policy by leveraging social engineering and a crafted Chrome extension . The Chromium security seve...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65946

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79193

An information leak in Canvas within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability has been addressed in updated versions of the chromium package. For example, Debian 12 provides a fix in version 152.0...

CVE-2026-79193

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78976

Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78976

Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65941

Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78976

Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78976

Improper input validation in the StorageAccessAPI of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This vulnerability is categorized with a Medium security severity. Remedia...