EUVD-2026-66066

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79112

A vulnerability in Skia within Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to perform an out-of-bounds read . By using a crafted HTML page , the attacker can read memory located inside the sandbox . The Chromium security severi...

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66055

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79060

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66053

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66056

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79058

Google Chrome versions prior to 152.0.7977.65 are vulnerable to a missing authorization flaw in the Passwords component. A remote attacker who has compromised the renderer process can exploit this to spoof UI elements via a crafted HTML page. Remediation is available in version 152.0.7977.65 and ...

CVE-2026-79177

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79060

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79177

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79060

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79177

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79060

In Google Chrome versions prior to 152.0.7977.65 , a vulnerability exists in the StorageAccessAPI due to incorrect authorization . A remote attacker who has already compromised the renderer process can bypass the web origin policy by using a crafted HTML page. This issue has been addressed in ver...

CVE-2026-79177

The Google Chrome browser on Windows (prior to version 152.0.7977.65 ) is vulnerable to incorrect authorization in the Media component. A remote attacker who has already compromised the renderer process can bypass system access restrictions by using a crafted HTML page . This vulnerability is ass...

CVE-2026-79284

UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78968

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...