3117719 matches found
EUVD-2026-65911
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could bypass web origin policy by serving a crafted HTML page to a victim. The Chromium security team rates this as Medium severity. No evidence o...
CVE-2026-79051
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79285
CVE-2026-79285 affects ANGLE in Google Chrome on Windows , prior to version 152.0.7977.65 . The root cause is an uninitialized resource , which allows a remote attacker to obtain cross-origin data by delivering a crafted HTML page. The Chromium project rated this as Medium severity. Users should ...
CVE-2026-79053
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79051
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79053
CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass site isolation , a key security ...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65914
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79132
Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65912
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79132
Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79132
CVE-2026-79132 is an improper input validation flaw in the Input component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to escape the sandbox and execute arbitrary co...
EUVD-2026-65910
Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79132
Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79201
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79049
CVE-2026-79049 is a medium-severity vulnerability in Google Chrome's Passwords component, caused by an incorrect reference resolution that allowed a remote attacker to bypass system access restrictions via a crafted file. The flaw affected Chrome versions prior to 152.0.7977.65 , where a fix was ...