CVE-2026-79190

A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...

CVE-2026-79284

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...

CVE-2026-79260

A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...

CVE-2026-79243

A flaw was found in Google Chrome's ReadingList component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable unauthorized access to data or functionality that should be...

CVE-2026-79058

A flaw was found in the Passwords feature of Google Chrome. A remote attacker, after compromising the browser's renderer process, could exploit this missing authorization vulnerability. By using a specially crafted HTML page, the attacker could spoof user interface UI elements, potentially...

CVE-2026-79184

A flaw was found in Google Chrome. Missing authorization in the Preload feature allows a remote attacker, who has compromised the renderer process, to bypass the web origin policy. This can be achieved by crafting a malicious HTML page, leading to unauthorized access or actions across different w...

CVE-2026-78968

A missing authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518125889...

CVE-2026-79112

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524864599...

CVE-2026-79177

A flaw was found in the Media component of Google Chrome on Windows. Incorrect authorization allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access...

CVE-2026-79106

A flaw was found in Google Chrome. Improper input validation in the Input component allows a remote attacker, who has already compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or...

CVE-2026-79220

A flaw was found in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak within the network component, allowing the attacker to obtain sensitive information...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...

CVE-2026-79216

A flaw was found in Blink, a rendering engine used in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by crafting a malicious HTML page. This could lead to the execution of arbitrary code within the browser's sandbo...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-78952

A flaw was found in Crashpad in Google Chrome. An out-of-bounds write vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside the sandbox. This exploitation occurs through a specially crafted HTML page, leading to a severe securi...

CVE-2026-79025

A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...

CVE-2026-79059

A flaw was found in Chromium's Back-Forward Cache BFCache component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive...

CVE-2026-79034

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS. This vulnerability allows the attacker to leak sensitive cross-origin data by tricking a user into visiting a specially crafte...

CVE-2026-79044

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit missing authorization by using a specially crafted HTML page. This could allow the attacker to obtain sensitive information...

CVE-2026-79007

A flaw was found in Google Chrome's GPU component. This vulnerability, caused by an uninitialized resource, could allow a remote attacker to potentially read memory outside the browser's security sandbox. The attacker would first need to compromise the renderer process and then entice a user to...