CVE-2026-79203

A flaw was found in DevTools in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the browser's rendering process, to bypass site isolation. Site isolation is a security feature designed to protect sensitive information by ensuring that content from...

DEBIAN-CVE-2026-79203

Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79203

Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-79186

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79186

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79103

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78953

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-78953

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-79289

This vulnerability affects Google Chrome prior to 152.0.7977.65 and stems from improper control of a resource through its lifetime in the Workers component. A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , weakening a core...

CVE-2026-79203

CVE-2026-79203 is an improper input validation flaw in DevTools within Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass site isolation , a key Chrome sandboxing mechanism. Chromium rates th...

CVE-2026-78903

CVE-2026-78903 is a site isolation bypass in Google Chrome prior to 152.0.7977.65 , caused by incomplete cleanup in the SiteIsolation component. A remote attacker who had already compromised the renderer process could bypass site isolation using a crafted HTML page , potentially gaining access to...

CVE-2026-79191

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in its SiteIsolation mechanism. A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation using a crafted HTML page. This allows cross-site data access...

CVE-2026-78953

CVE-2026-78953 is a missing authorization flaw in the SiteIsolation mechanism of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted PDF file to bypass site isolation, potentially expanding their reach beyond the inten...

CVE-2026-79002

CVE-2026-79002 is an incorrect authorization flaw in the SiteIsolation mechanism of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , potentially allowing cross-origin access that the ...

CVE-2026-79053

CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass site isolation , a key security ...

EUVD-2026-65888

Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79066

CVE-2026-79066 is an improper input validation flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , a key browser sandboxing mechanism. The Chr...

CVE-2026-79031

CVE-2026-79031 is an improper resource exposure vulnerability in the Preload component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass site isolation , potentially exposing resources across isolated origins. Chr...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...