CVE-2026-79031

A flaw was found in Preload in Google Chrome. A remote attacker could exploit improper resource exposure by crafting a malicious HTML page. This vulnerability allows the attacker to bypass site isolation, which is a security feature designed to protect against data theft and malicious code...

CVE-2026-79000

A flaw was found in Google Chrome. Improper input validation in DeviceBoundSessionCredentials allows a remote attacker, leveraging social engineering, to bypass the web origin policy. This can be achieved by sending crafted network traffic, potentially leading to unauthorized access or manipulati...

CVE-2026-78979

A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503720291...

CVE-2026-78940

A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...

CVE-2026-79234

A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...

CVE-2026-79192

An improper input validation flaw was found in the Variations component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502082953...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-79144

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501759192...

CVE-2026-79154

A flaw was found in chromium-browser. This missing authorization vulnerability in DevTools allows a remote attacker to exploit the system. By leveraging social engineering and user interface interaction, an attacker can obtain sensitive information...

CVE-2026-79133

A flaw was found in chromium-browser. A remote attacker could exploit an incorrect authorization vulnerability in the Forms component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-79095

A flaw was found in Chromium. This vulnerability, located in the Payments component, allows a remote attacker to obtain sensitive cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to an information leak...

CVE-2026-79087

A flaw was found in Chromium. This injection vulnerability, specifically within Chrome Tabs, allows a remote attacker to potentially bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to unauthorized access within the syste...

CVE-2026-79104

A flaw was found in Google Chrome. Missing authorization in the Sensor component could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation occurs when the attacker provides a specially crafted HTML page, leading to...

CVE-2026-79257

A flaw was found in Chromium. A use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79049

An incorrect reference resolution flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513786555...

CVE-2026-79043

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79027

A flaw was found in WebRTC. A remote attacker could exploit a use-after-free vulnerability by sending crafted network traffic. This could allow the attacker to execute arbitrary code within the sandbox environment, leading to potential system compromise...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78901

A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...