29763 matches found
EUVD-2026-65925
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79214
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
A vulnerability in Google Chrome (specifically the chromium package) allows a remote attacker to potentially obtain cross-origin data via a crafted HTML page. The root cause is an observable discrepancy in PerformanceAPIs affecting versions prior to 152.0.7977.65 . Impact of this flaw is categori...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65921
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65914
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79201
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
A vulnerability in the Loader component of Google Chrome (prior to version 152.0.7977.65) involves incorrect authorization , which may allow a remote attacker to bypass web origin policies via a crafted HTML page. This issue has been addressed in various distributions, including a fix for Debian ...
EUVD-2026-65912
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79201
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79201
A security vulnerability exists in Google Chrome (prior to version 152.0.7977.65 ) due to improper access control in Workers . A remote attacker can exploit this flaw by leveraging a crafted HTML page to bypass the web origin policy . Impact is categorized as Medium (Chromium security severity) w...
CVE-2026-79285
A Use of Uninitialized Resource vulnerability in the ANGLE component of Google Chrome on Windows (prior to version 152.0.7977.65 ) allows a remote attacker to obtain cross-origin data via a crafted HTML page. While specific exploit links are not provided, the vulnerability is associated with a Me...