CVE-2026-78985

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in its FileSystem component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , potentially executing arbitrary code outside the browser's security sandbox...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-79109

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79109

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78945

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-78945

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

An improper privilege management flaw in the Navigation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, who had already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. The NVD-as...

CVE-2026-78945

CVE-2026-78945 is a use-after-free vulnerability in the Views component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by luring a user into visiting a crafted HTML page through social engineering, potentially enabling arbitrary code execution outs...

CVE-2026-79109

CVE-2026-79109 is an improper input validation flaw in the Printing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code . Chromium rates the severit...

CVE-2026-79286

CVE-2026-79286 is a missing authorization flaw in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 . A local attacker with a co-installed app can potentially execute arbitrary code outside the sandbox , escaping the intended security boundary of the browser. Chromium rates the severi...

CVE-2026-79286

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79007

CVE-2026-79007 is an uninitialized resource vulnerability in the GPU component of Google Chrome (and Chromium-based browsers such as Microsoft Edge ), affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially read memory outsi...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is rated Medium by Chromium and scores 7.5 (High)...

CVE-2026-79071

A race condition in the GPU component of Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the browser sandbox by convincing a user to visit a crafted HTML page. The CISA SSVC assessment ind...