PT-2026-88641

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88752

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88579

Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

PT-2026-88529

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84335

An incorrect authorization flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522302504 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-84328

A missing authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498710886 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

Linux Distros Unpatched Vulnerability : CVE-2026-84335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged...

CVE-2026-84329

A confused deputy vulnerability in the CredentialProvider component of Google Chrome on Windows (prior to 152.0.7977.75 ) allowed a remote attacker who had already compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium rates the severity as Low ; the CVSS...

CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-84552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in the Actor component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy through a specially crafted HTML...

CVE-2026-79123

A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...

CVE-2026-79060

An incorrect authorization flaw was found in the StorageAccessAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519254827...

CVE-2026-79032

A flaw was found in Chromium's Network component. An improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access to...

CVE-2026-78967

A flaw was found in chromium-browser. Missing authorization in the Back-Forward Cache BFCache component of Google Chrome allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by an attacker who has already compromised the renderer process, through the...

CVE-2026-79214

A flaw was found in Chromium. Improper input validation within the Preload component allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by crafting a malicious HTML page, leading to unauthorized access to data o...

CVE-2026-79085

A flaw was found in Chromium's Network component. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across...