CVE-2026-78894

A race condition in the Payments component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The vulnerability is associated with Chromium and has been addressed in various distri...

CVE-2026-79264

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) involves incorrect reference resolution within the Preload mechanism. This flaw allows a remote attacker to bypass web origin policies by navigating to a crafted HTML page. The vulnerability is classified with a Medium security se...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65886

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65885

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78894

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Google Chrome versions prior to 152.0.7977.65 are vulnerable to missing authorization in the Preload process. This flaw allows a remote attacker to bypass web origin policies by leveraging a crafted HTML page. This vulnerability affects the chromium package across various distributions, including...

CVE-2026-79136

A flaw in the ServiceWorker component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This vulnerability could lead to unauthorized access to sensitive information or other security impacts. Remediation ...

CVE-2026-79248

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This issue is rooted in incorrect authorization during input processing. Remediation involves updating th...

EUVD-2026-65874

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65878

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...