CVE-2026-79183

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the Accessibility component of Google Chrome, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation requires social engineering and user interaction with...

CVE-2026-79155

A race condition flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522294538...

CVE-2026-79149

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-79139

A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...

CVE-2026-79142

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...

CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79121

A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...

CVE-2026-79111

A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79083

A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...

Update Chrome before you browse again

Chrome is rolling out an update for its desktop browser. The update includes 327 security fixes, ten of which address critical vulnerabilities. The stable channel has been updated to 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. How to update Chrome If you don’t want to wait...

CVE-2026-78891

A flaw was found in WebRTC in Google Chrome. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized control over the affected system...

CVE-2026-76023

An improper resource control flaw was found in the Linux Toolkit Theming component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=545124048...

CVE-2026-76020

A race condition flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=541837151...

CVE-2026-76021

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=541854084...

CVE-2026-76017

A flaw was found in Chromoting, a component of Google Chrome. This vulnerability, a use-after-free error, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when an attacker sends specially crafted network traffic to a vulnerable...

CVE-2026-80198

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80201

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

Linux Distros Unpatched Vulnerability : CVE-2026-78937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-79674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended...

Linux Distros Unpatched Vulnerability : CVE-2026-78999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and...