CVE-2026-78898

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79017

A race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass system access restrictions via a crafted Chrome extension. The Chromium security team rates it Low severity; CVSS 3.1 scores it 6.5 (Medium) with high integrity impact but no co...

CVE-2026-79225

Google Chrome on Android (chromium-browser) prior to 152.0.7977.65 contains an incorrect authorization flaw in the browser's UI interaction layer. A remote attacker can leverage social engineering to bypass system access restrictions, resulting in a low integrity impact (CVSS 3.1: 4.3 MEDIUM ; re...

CVE-2026-79015

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79108

UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79089

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-66035

Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79077

CVE-2026-79077 is an incorrect authorization flaw in WebProtect , a component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can craft a malicious HTML page to bypass system access restrictions , resulting in low integrity impact. Chromium rates the severity as Low ; the CVSS...

CVE-2026-79025

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, bypassing system access restrictions . The vulnerabili...

CVE-2026-79003

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79003

An incorrect authorization flaw in the Device component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Medium severity (CVSS 3.1: 4.3 , vector AV:N/AC:L/PR:N...

CVE-2026-78959

CVE-2026-78959 affects the FileSystem component in Google Chrome prior to 152.0.7977.65 . The root cause is improper handling of case sensitivity, allowing a remote attacker who leverages social engineering to bypass system access restrictions by getting a user to visit a crafted HTML page. The C...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79099

CVE-2026-79099 is a missing authorization vulnerability in the Network component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium rates it Medium severity; the CVSS 3.1 score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U...

CVE-2026-79099

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...