CVE-2026-79044

Google Chrome on Android versions prior to 152.0.7977.65 is vulnerable to an authorization bypass within the WebAppInstalls component. A remote attacker who has compromised the renderer process can exploit this flaw by serving a crafted HTML page to obtain sensitive information. For Debian 12 boo...

CVE-2026-79104

Google Chrome and Chromium are vulnerable to a missing authorization flaw in the Sensor component prior to version 152.0.7977.65 . A remote attacker who successfully compromises the renderer process can use a crafted HTML page to obtain sensitive information . To remediate this vulnerability, use...

EUVD-2026-65829

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65825

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79007

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65826

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

A race condition in the GPU component of Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox. This can be triggered by visiting a crafted HTML page . While specific exploit details are not ...

CVE-2026-79216

A buffer overflow vulnerability exists in Blink within Google Chrome prior to version 152.0.7977.65 . A remote attacker who has successfully compromised the renderer process can exploit this flaw by using a crafted HTML page to execute arbitrary code inside the sandbox. The security severity for ...

CVE-2026-79007

Google Chrome versions prior to 152.0.7977.65 are vulnerable to an uninitialized resource in GPU (CWE-908). A remote attacker who has already compromised the renderer process can leverage this flaw to potentially read memory outside the sandbox by using a crafted HTML page. This vulnerability is ...

CVE-2026-78952

Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78952

Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78952

Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78952

Google Chrome on Windows prior to version 152.0.7977.65 is vulnerable to an out-of-bounds write within the Crashpad component. A remote attacker who has already compromised the renderer process can exploit this flaw by serving a crafted HTML page to execute arbitrary code outside the sandbox. Thi...

CVE-2026-78954

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65817

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-78954

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...