CVE-2026-79025

A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...

CVE-2026-79044

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit missing authorization by using a specially crafted HTML page. This could allow the attacker to obtain sensitive information...

CVE-2026-79007

A flaw was found in Google Chrome's GPU component. This vulnerability, caused by an uninitialized resource, could allow a remote attacker to potentially read memory outside the browser's security sandbox. The attacker would first need to compromise the renderer process and then entice a user to...

CVE-2026-78986

A flaw was found in Chromium. A remote attacker, after compromising the renderer process, could exploit an uninitialized resource in the Graphics Processing Unit GPU by crafting a malicious HTML page. This could potentially lead to the disclosure of sensitive cross-origin data...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78984

A flaw was found in the GPU component of Chromium. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to read sensitive memory outside of the...

CVE-2026-78941

A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-79229

A flaw was found in ANGLE, a component within Chromium. This uninitialized resource vulnerability could allow a remote attacker, who has already compromised the renderer process, to read sensitive memory outside of the security sandbox. This exploitation can occur by tricking a user into visiting...

CVE-2026-79212

A flaw was found in Google Chrome. This vulnerability, stemming from missing authorization in the Passwords component, could allow a remote attacker to bypass the web origin policy. To exploit this, the attacker would first need to compromise the browser's renderer process and employ social...

CVE-2026-79186

A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...

CVE-2026-79074

A flaw was found in Google Chrome's Network component. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information, leading to an information leak...

CVE-2026-79292

A flaw was found in Chromecast within Google Chrome. An integer overflow vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox environment. This exploitation can occur by tricking a user into visiting...

CVE-2026-79267

A flaw was found in chromium-browser. A race condition in the Workers component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This bypass was achieved by tricking a user into opening a specially crafted HTML page, potentially leading...

CVE-2026-79255

A flaw was found in WebRTC, a real-time communication component within Chromium. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by tricking the user into visiting...

CVE-2026-79066

A flaw was found in Google Chrome. This improper input validation vulnerability in the Navigation component allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This can be achieved by crafting a malicious HTML page, potentially leading to...

CVE-2026-79065

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to...

CVE-2026-79054

A flaw was found in Chromecast within Google Chrome. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page,...

CVE-2026-79053

A flaw was found in Lighthouse in Google Chrome. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page to the...

CVE-2026-79067

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows them to bypass system access restrictions by using a specially crafted HTML page...