CVE-2026-79040

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79040

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78977

An uninitialized resource in the GPU component of Google Chrome on Android (prior to 152.0.7977.65 ) allows a remote attacker to read memory inside the sandbox via a crafted HTML page, resulting in information disclosure . The Chromium team rates the severity as Low , while NVD assigns a CVSS 3.1...

CVE-2026-78977

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79040

CVE-2026-79040 is an uninitialized resource vulnerability in the GPU component of Google Chrome on Android (affecting versions prior to 152.0.7977.65 ). A remote attacker can exploit it by enticing a user to visit a crafted HTML page , enabling memory reads outside the application sandbox , poten...

CVE-2026-79206

CVE-2026-79206 is an out-of-bounds read in the FileSystem component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to read memory outside the sandbox via a crafted HTML page delivered through social engineering. Chromium rates the severity as Low ; CVSS 3.1 scores it 6.5 (Me...

CVE-2026-79206

Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79263

A race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Chromium rates the severity as Low , while the CVSS 3.1 score is 8.1 (HIGH) with a high attack complexity but no...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

An improper input validation vulnerability in the Media component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rated this as Medium severity, while NVD assigned a CVSS 3.1 scor...

CVE-2026-79004

CVE-2026-79004 is an out-of-bounds read in the Media component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to read memory outside the sandbox, resulting in low confidentiality impact with c...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79004

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79073

CVE-2026-79073 affects the Parser component of Google Chrome prior to 152.0.7977.65 . The root cause is an improper state validation flaw, which allows a remote attacker to execute arbitrary code inside the browser's security sandbox by convincing a user to visit a crafted HTML page. The Chromium...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79182

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79182

CVE-2026-79182 is an improper input validation flaw in the Media component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can deliver a crafted HTML page that, when visited by a user, may allow execution of arbitrary code outside the sandbox . The Chromium security severity i...