40032 matches found
CVE-2026-79243
CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy via a crafted HTML page, potentially gaini...
CVE-2026-79273
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
CVE-2026-79261 is an incorrect authorization flaw in the Controls component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass web origin policy via a crafted HTML page. Chromium rates it Low severity; the CVSS 3.1 score is 4.3 (Medium) with a network vector, low compl...
CVE-2026-79190
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79190
CVE-2026-79190 is an incorrect authorization flaw in Google Chrome Extensions , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorize...
CVE-2026-79190
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66028
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-79000
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-78979
CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker leveraging social engineering can bypass the web origin policy via a crafted HTML page, potentially gaining unauthorized access to sensitive information or actio...
CVE-2026-79000
CVE-2026-79000 is an improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass the web origin policy by sending crafted network traffic, potentially leading to unauthorized access...
CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79184
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79184
CVE-2026-79184 is a missing authorization flaw in the Preload feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , leading to unauthorized access or actions a...
CVE-2026-79184
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79141
CVE-2026-79141 is an incorrect authorization vulnerability in the Google Chrome browser, affecting versions prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitiv...