CVE-2026-79216

A flaw was found in Blink, a rendering engine used in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by crafting a malicious HTML page. This could lead to the execution of arbitrary code within the browser's sandbo...

CVE-2026-79287

A flaw was found in chromium-browser. A remote attacker could exploit an observable discrepancy in Forms by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-79293

A flaw was found in chromium-browser. A remote attacker could exploit an information leak in the Animation component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...

CVE-2026-79250

A flaw was found in Google Chrome. A remote attacker could exploit a user interface UI misrepresentation vulnerability by enticing a victim to visit a specially crafted HTML page. This could allow the attacker to spoof the address bar, potentially leading to phishing attacks or other deceptive...

CVE-2026-79283

A flaw was found in Google Chrome. A remote attacker could exploit a user interface UI misrepresentation vulnerability in the Geometry component by crafting a malicious HTML page. This could allow the attacker to spoof UI elements, potentially deceiving users...

CVE-2026-79271

A flaw was found in Google Chrome. An information leak vulnerability exists in the Document Object Model DOM. A remote attacker could exploit this by leveraging social engineering tactics to trick a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitiv...

CVE-2026-79274

A flaw was found in chromium-browser. A remote attacker could exploit a vulnerability in the GPU component by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other origins...

CVE-2026-79291

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-79239

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-79244

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Animation component, could allow a remote attacker to execute arbitrary code. This exploitation occurs when a user visits a specially crafted HTML page, potentially compromising the browser's security...

CVE-2026-79242

A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-79264

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Preload component, allows a remote attacker to bypass the web origin policy. By crafting a malicious HTML page, an attacker could potentially access sensitive information or perform unauthorized...

CVE-2026-79262

A flaw was found in Google Chrome. Incorrect authorization in the Network component allowed a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This bypass could enable an attacker to access restricted resources or data from other origins, potentially leading to...

CVE-2026-79241

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the GPU component by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox,...

CVE-2026-78963

A flaw was found in chromium-browser. Improper input validation in the Media component of Google Chrome could allow a remote attacker to execute arbitrary code outside of the sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page. The primary consequence is...

CVE-2026-78952

A flaw was found in Crashpad in Google Chrome. An out-of-bounds write vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside the sandbox. This exploitation occurs through a specially crafted HTML page, leading to a severe securi...

CVE-2026-79011

A flaw was found in Chromium Browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to bypass system access restrictions, potentially leading to...

CVE-2026-78951

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...