SUSE CVE-2026-79292

Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...

CVE-2026-79190

A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...

CVE-2026-79284

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...

CVE-2026-79260

A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...

CVE-2026-79243

A flaw was found in Google Chrome's ReadingList component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable unauthorized access to data or functionality that should be...

CVE-2026-79058

A flaw was found in the Passwords feature of Google Chrome. A remote attacker, after compromising the browser's renderer process, could exploit this missing authorization vulnerability. By using a specially crafted HTML page, the attacker could spoof user interface UI elements, potentially...

CVE-2026-79184

A flaw was found in Google Chrome. Missing authorization in the Preload feature allows a remote attacker, who has compromised the renderer process, to bypass the web origin policy. This can be achieved by crafting a malicious HTML page, leading to unauthorized access or actions across different w...

CVE-2026-78968

A missing authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518125889...

CVE-2026-79112

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524864599...

CVE-2026-79177

A flaw was found in the Media component of Google Chrome on Windows. Incorrect authorization allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access...

CVE-2026-79106

A flaw was found in Google Chrome. Improper input validation in the Input component allows a remote attacker, who has already compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or...

CVE-2026-79220

A flaw was found in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak within the network component, allowing the attacker to obtain sensitive information...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...

CVE-2026-79216

A flaw was found in Blink, a rendering engine used in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by crafting a malicious HTML page. This could lead to the execution of arbitrary code within the browser's sandbo...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-78952

A flaw was found in Crashpad in Google Chrome. An out-of-bounds write vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside the sandbox. This exploitation occurs through a specially crafted HTML page, leading to a severe securi...

CVE-2026-79025

A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...

CVE-2026-79059

A flaw was found in Chromium's Back-Forward Cache BFCache component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive...