40032 matches found
CVE-2026-79141
CVE-2026-79141 is an incorrect authorization vulnerability in the Google Chrome browser, affecting versions prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitiv...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79185
CVE-2026-79185 is an information leak in the DOM (Document Object Model) of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page , potentially exposing sensitive data across origins. The CNA rates it Me...
CVE-2026-79185
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79185
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79068
CVE-2026-79068 is an improper resource exposure flaw in the StreamsAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The CVSS 3.1 score is 4.3 (Medium) with ...
CVE-2026-79068
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79085
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79085
CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy via a crafted HTML page, potentially gaining unauthorized access to sensitive infor...
CVE-2026-79269
An uninitialized resource flaw in ANGLE , a component of Google Chrome, allows a remote attacker to potentially bypass the web origin policy by enticing a user to visit a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 and is rated Medium severity (CVSS 3.1: 4.3). Explo...
CVE-2026-79085
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
CVE-2026-79178 is an incorrect authorization flaw in the Web Authentication (Passkeys & Security Keys) component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , bypassing the web origin policy and potentially enabling un...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79205
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79205
CVE-2026-79205 is an incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to open a crafted HTML page , potentially gaining unauthorized access to sensitive information or performing a...