CVE-2026-79007

CVE-2026-79007 is an uninitialized resource vulnerability in the GPU component of Google Chrome (and Chromium-based browsers such as Microsoft Edge ), affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially read memory outsi...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is rated Medium by Chromium and scores 7.5 (High)...

CVE-2026-79071

A race condition in the GPU component of Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the browser sandbox by convincing a user to visit a crafted HTML page. The CISA SSVC assessment ind...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79007

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78938

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79236

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79209

Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79078

A use-after-free vulnerability in the FedCM (Federated Credential Management) component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering and a crafted HTML page, to execute arbitrary code outside the browser sandbox . The NVD-assigned CVSS v3.1 score...

CVE-2026-78952

Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78952

CVE-2026-78952 is an out-of-bounds write in Crashpad within Google Chrome for Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerabili...

CVE-2026-78938

CVE-2026-78938 is a type confusion vulnerability in the V8 JavaScript engine shipped with Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by delivering a crafted HTML page , requiring only user interaction (visiting the page) to execute arbitrary code inside the br...

CVE-2026-79078

Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79027

CVE-2026-79027 is a use-after-free vulnerability in the WebRTC component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by sending crafted network traffic , leading to arbitrary code execution inside the Chrome sandbox . The Chromium team rates the...

CVE-2026-78904

CVE-2026-78904 is a type confusion vulnerability in ANGLE , the graphics abstraction layer used in Google Chrome prior to 152.0.7977.65 . A remote attacker can trigger the flaw via a crafted HTML page, potentially leading to arbitrary code execution outside the browser's security sandbox . The Ch...

CVE-2026-78904

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78899

CVE-2026-78899 is a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to 152.0.7977.65 . The flaw arises from incorrect dynamic memory management: after a memory location is freed, the pointer is not cleared, allowing an attacker to manipulate the program. A remote a...

CVE-2026-79275

CVE-2026-79275 is a use after free vulnerability in ANGLE , a component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can trigger the flaw via a crafted HTML page , leading to arbitrary code execution outside the browser sandbox. The vulnerability carries a CVSS...