CVE-2026-79213

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...

CVE-2026-79218

A flaw was found in Google Chrome's Sandbox component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation is possible through a specially crafted HTML page, leading to a...

CVE-2026-79215

A flaw was found in Chromium's WebGL component. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox...

CVE-2026-79206

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the FileSystem component allows a remote attacker to read memory outside of the sandbox. This can be exploited by leveraging social engineering to trick a user into visiting a specially crafted HTML page, leading to...

CVE-2026-79211

A flaw was found in Google Chrome's USB component. This incorrect authorization vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79202

A flaw was found in Chromecast within Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further syste...

CVE-2026-79209

A flaw was found in Google Chrome's Animation component. A remote attacker could exploit a type confusion vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code within the browser's sandbox, leading to unauthorized actions or data...

CVE-2026-79205

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...

CVE-2026-79203

A flaw was found in DevTools in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the browser's rendering process, to bypass site isolation. Site isolation is a security feature designed to protect sensitive information by ensuring that content from...

CVE-2026-79201

A flaw was found in Chromium. Improper access control in the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actions...

CVE-2026-79198

A flaw was found in Google Chrome. This use-after-free vulnerability in the Platform component allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can bypass security restrictions and run malicious code within the browser's...

CVE-2026-79191

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the SiteIsolation feature allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by tricking a user into interacting...

CVE-2026-79200

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...

CVE-2026-79187

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the WebRTC component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to...

CVE-2026-79178

A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys component, related to incorrect authorization. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass the web origin polic...

CVE-2026-79189

A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-79182

A flaw was found in Media in Google Chrome. Improper input validation could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...

CVE-2026-79175

A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79180

A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...

CVE-2026-79174

A flaw was found in Extensions in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. By crafting a malicious HTML page, the attacker can gain unauthorized access to privileged pages...