116883 matches found
CVE-2026-79123
Google Chrome on Windows versions prior to 152.0.7977.65 is vulnerable to improper input validation within the NTP Footer component. A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to bypass the web origin policy . This vulnera...
EUVD-2026-66037
UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66039
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79261
A flaw in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This is due to an incorrect authorization vulnerability within the Controls component. Exploitation could potentially lead to unauthorized access t...
CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79119
Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...
EUVD-2026-66032
Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79119
A use after free vulnerability exists in the PDF component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by providing a crafted PDF file to execute arbitrary code within the sandbox. The Chromium security severity is rated as Low . Remediation is availa...
EUVD-2026-66030
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66026
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78979
A race condition in the Core component of Google Chrome on Windows (prior to version 152.0.7977.65 ) allows a remote attacker to bypass the web origin policy using a crafted HTML page and social engineering. The vulnerability is categorized with a Low security severity by Chromium. Remediation is...
CVE-2026-79000
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-79077
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66021
Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66017
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...