947 matches found
CVE-2026-79256
A flaw was found in WebView in Google Chrome. A remote attacker who has compromised the renderer process could exploit an externally controlled reference vulnerability by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the sandbox, allowing the...
CVE-2026-79071
A flaw was found in Google Chrome's GPU component. A race condition in the GPU could allow a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation is achieved by enticing a user to visi...
CVE-2026-79014
A flaw was found in Chromium's Autofill component. This race condition allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable the attacker to access or manipulate data from different web origins, potentially leading to...
CVE-2026-79139
A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...
CVE-2026-79116
A flaw was found in Viz in Google Chrome. Missing authorization allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized...
Linux Distros Unpatched Vulnerability : CVE-2026-79256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer...
Linux Distros Unpatched Vulnerability : CVE-2026-79005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass...
Linux Distros Unpatched Vulnerability : CVE-2026-79044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process...
Linux Distros Unpatched Vulnerability : CVE-2026-78953
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-79010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the rendere...
Linux Distros Unpatched Vulnerability : CVE-2026-79021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass...
Linux Distros Unpatched Vulnerability : CVE-2026-78967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system...
Linux Distros Unpatched Vulnerability : CVE-2026-78984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read...
Linux Distros Unpatched Vulnerability : CVE-2026-78903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site...
DEBIAN-CVE-2026-79247
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...
DEBIAN-CVE-2026-79228
Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-79212
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-79203
Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-79210
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79203
Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...