CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79144

An information leak in the Skia component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to obtain cross-origin data through a crafted HTML page. This vulnerability is rated with a Medium security severity by Chromium. Remediation is available in updated versions of th...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78909

A use-after-free vulnerability exists in the Views component of Google Chrome (prior to version 152.0.7977.65). A remote attacker could exploit this flaw by using social engineering to lure a user to a crafted HTML page , potentially resulting in arbitrary code execution outside of the browser's ...

CVE-2026-78990

Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79271

A vulnerability in Google Chrome prior to version 152.0.7977.65 allows for an information leak in the DOM . A remote attacker can exploit this by leveraging social engineering to trick a user into visiting a crafted HTML page , which can then be used to obtain sensitive information. This issue ha...

EUVD-2026-65859

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78987

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78985

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65853

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79237

A vulnerability in the Navigation component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to bypass the web origin policy using a crafted HTML page. This issue is categorized as incorrect authorization (CWE-863). Fixed versions are available in various distributions, in...

CVE-2026-78985

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65851

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79028

Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65839

Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78966

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a security issue where an externally controlled reference in QUIC allows a remote attacker to bypass web origin policies via a crafted HTML page. The impact is classified as Medium severity. Remediation is available in updated versio...

CVE-2026-78966

Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79016

Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79016

A vulnerability exists in Google Chrome prior to version 152.0.7977.65 involving an observable discrepancy in SVG . This flaw allows a remote attacker to obtain cross-origin data by visiting a crafted HTML page. The vulnerability has been addressed in updated versions, such as the Debian LTS pack...