CVE-2026-79289

This vulnerability affects Google Chrome prior to 152.0.7977.65 and stems from improper control of a resource through its lifetime in the Workers component. A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , weakening a core...

CVE-2026-79203

CVE-2026-79203 is an improper input validation flaw in DevTools within Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass site isolation , a key Chrome sandboxing mechanism. Chromium rates th...

CVE-2026-78903

CVE-2026-78903 is a site isolation bypass in Google Chrome prior to 152.0.7977.65 , caused by incomplete cleanup in the SiteIsolation component. A remote attacker who had already compromised the renderer process could bypass site isolation using a crafted HTML page , potentially gaining access to...

CVE-2026-79191

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in its SiteIsolation mechanism. A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation using a crafted HTML page. This allows cross-site data access...

CVE-2026-79002

CVE-2026-79002 is an incorrect authorization flaw in the SiteIsolation mechanism of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , potentially allowing cross-origin access that the ...

CVE-2026-78953

CVE-2026-78953 is a missing authorization flaw in the SiteIsolation mechanism of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted PDF file to bypass site isolation, potentially expanding their reach beyond the inten...

CVE-2026-79053

CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass site isolation , a key security ...

CVE-2026-79066

CVE-2026-79066 is an improper input validation flaw in the Navigation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to bypass site isolation , a key browser sandboxing mechanism. The Chr...

CVE-2026-79031

CVE-2026-79031 is an improper resource exposure vulnerability in the Preload component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass site isolation , potentially exposing resources across isolated origins. Chr...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...

SUSE CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

Microsoft Edge (Chromium) < 151.0.4129.101 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.101. It is, therefore, affected by multiple vulnerabilities as referenced in the August 20, 2026 advisory. - Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute...

CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-76033

CVE-2026-76033 is an inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 . A remote attacker who had already compromised the renderer process could bypass site isolation via a crafted HTML page. The vulnerability was reported by Google on 2026-05-26 (bug 516715010) and c...

CVE-2026-19153

A flaw was found in Google Chrome. Insufficient validation of untrusted input in the Workers component could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This could enable the attacker to access sensitive information or further compromise th...

Linux Distros Unpatched Vulnerability : CVE-2026-19153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proces...

CVE-2026-19153

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-19153

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-17779

Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...