CVE-2026-79251

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79251

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79251

CVE-2026-79251 is an improper input validation vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker can potentially bypass web origin policy via a crafted HTML page, with a CVSS v3.1 score of 4.3 (Medium) requiring user interaction. The fix is include...

CVE-2026-78943

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78943

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78943

CVE-2026-78943 is an improper input validation flaw in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can, by leveraging social engineering , trick a user into interacting with a crafted HTML page to bypass the we...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255

An improper input validation flaw in WebRTC within Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page. Red Hat elaborates that this bypass could lead to unauthorized access to sensi...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79264

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79136

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

CVE-2026-79248 is an incorrect authorization flaw in the Input component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy (security boundary evasion) by presenting a specially crafted HTML page. The flaw ...

CVE-2026-79110

CVE-2026-79110 is a missing authorization vulnerability in the Preload component of Google Chrome (prior to version 152.0.7977.65 ). A remote attacker can bypass the web origin policy by tricking a user into opening a specially crafted HTML page, potentially leading to unauthorized access to sens...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79110

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...