116883 matches found
CVE-2026-78951
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78951
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65986
Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79134
Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65983
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79003
Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79269
Google Chrome experienced a web origin policy bypass vulnerability due to an uninitialized resource in the ANGLE component. This flaw existed in versions prior to 152.0.7977.65 and could be triggered by a remote attacker through a crafted HTML page . While the initial description identifies the i...
CVE-2026-79134
Google Chrome versions prior to 152.0.7977.65 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page , which may allow the attacker to obtain sensitive information . Remediation involv...
CVE-2026-79068
A vulnerability exists in Google Chrome prior to version 152.0.7977.65 due to improper resource exposure in the StreamsAPI . A remote attacker could exploit this by using a crafted HTML page to potentially bypass the web origin policy and access a privileged page . This issue is listed in several...
CVE-2026-78978
An out-of-bounds read vulnerability exists in the ANGLE component of Google Chrome on Windows, specifically in versions prior to 152.0.7977.65 . A remote attacker can exploit this by visiting a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerabilit...
CVE-2026-78983
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65976
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79234
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65957
Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79205
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65972
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-65971
Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...