4665 matches found
EUVD-2026-65965
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-79121
Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-79121
Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-79224
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-79121
The Chromium web browser and Google Chrome (prior to version 152.0.7977.65) are vulnerable to a critical security flaw caused by improper input validation in Chromecast . A remote attacker who has already compromised the renderer process can exploit this by serving a crafted HTML page to execute ...
CVE-2026-79054
A Use after free vulnerability exists in the Chromecast component of Google Chrome (and other Chromium -based browsers like Microsoft Edge ) in versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage this flaw to execute arbitrary code out...
CVE-2026-79224
A Use after free vulnerability exists in Chromecast within Google Chrome (prior to version 152.0.7977.65 ) and Chromium . A remote attacker who has already compromised the renderer process can use a crafted HTML page to execute arbitrary code outside the sandbox . This issue is also addressed in ...
PT-2026-81657
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Navigation allows a remote attacker who has compromised the renderer process to bypass site isolation through a crafted HTML page. Site isolation is a...
PT-2026-81600
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...
PT-2026-81533
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security...
PT-2026-81647
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Lighthouse allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML page...
PT-2026-81579
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Core allows a remote attacker who has compromised the renderer process to potentially spoof the address bar using a crafted HTML page. Recommendations Update...
PT-2026-81843
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper control of a resource through its lifetime in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. Site...
PT-2026-81763
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...
CVE-2026-78983: Use After Free
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79001: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79007: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79083: Improper Enforcement of Behavioral Workflow
Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79032: Improper Input Validation
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78999: Improper Privilege Management
Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...