CVE-2026-79229

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79228

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65926

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65925

Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79002

A vulnerability in Google Chrome (and Chromium ) prior to version 152.0.7977.65 allows a remote attacker who has compromised the renderer process to bypass site isolation . This is possible by using a crafted HTML page due to an incorrect authorization flaw within the SiteIsolation component. Imp...

CVE-2026-79229

An uninitialized resource in the ANGLE component of Google Chrome (prior to version 152.0.7977.65) allows a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. This vulnerability (CWE-908) has a Medium severity and a CVSS 3.1 base s...

CVE-2026-79214

The Chromium browser (and various distributions including Debian , Astra Linux , and openSUSE ) is vulnerable to a Medium severity security issue (CVE-2026-79214 ) due to improper input validation in the Preload feature. A remote attacker who has already compromised the renderer process can explo...

CVE-2026-79228

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79214

Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78953

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-79002

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65927

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

EUVD-2026-65929

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78953

CVE-2026-78953 is a missing authorization vulnerability in SiteIsolation within Google Chrome versions prior to 152.0.7977.65 . A remote attacker who has compromised the renderer process can bypass site isolation by using a crafted PDF file . This vulnerability is categorized with a Medium securi...

CVE-2026-79228

A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) was caused by incorrect authorization in SiteIsolation . This flaw allowed a remote attacker who had compromised the renderer process to bypass site isolation and access a privileged page through a crafted HTML page. The issue has...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

A missing authorization vulnerability exists in the BFCache component of Google Chrome (prior to version 152.0.7977.65). A remote attacker who has successfully compromised the renderer process can exploit this flaw to bypass system access restrictions by using a crafted HTML page . The security s...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...