CVE-2026-79191

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the SiteIsolation feature allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by tricking a user into interacting...

CVE-2026-79200

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...

CVE-2026-79187

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the WebRTC component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to...

CVE-2026-79178

A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys component, related to incorrect authorization. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass the web origin polic...

CVE-2026-79189

A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-79182

A flaw was found in Media in Google Chrome. Improper input validation could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...

CVE-2026-79175

A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79180

A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...

CVE-2026-79174

A flaw was found in Extensions in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. By crafting a malicious HTML page, the attacker can gain unauthorized access to privileged pages...

CVE-2026-79155

A flaw was found in Google Chrome. A race condition in the FileSystem component could allow a remote attacker, who has already compromised the browser's renderer process, to execute arbitrary code outside of the security sandbox. This exploitation is possible through a specially crafted HTML page...

CVE-2026-79149

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-79150

A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to significant security compromise...

CVE-2026-79141

A flaw was found in Google Chrome Browser. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions within the browser...

CVE-2026-79139

A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...

CVE-2026-79142

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...

CVE-2026-79138

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in ANGLE, a component used for graphics rendering, could allow a remote attacker to execute malicious code. This vulnerability can be exploited by tricking a user into visiting a specially crafted web page. Successful...

CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79130

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox, potentiall...

CVE-2026-79131

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the...

CVE-2026-79128

A flaw was found in Chromium. A use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...