CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78959

CVE-2026-78959 affects the FileSystem component in Google Chrome prior to 152.0.7977.65 . The root cause is improper handling of case sensitivity, allowing a remote attacker who leverages social engineering to bypass system access restrictions by getting a user to visit a crafted HTML page. The C...

CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79238

An incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering and a crafted Chrome extension , to bypass the web origin policy. Per Red Hat, this bypass could lead to unauthorized access to sensitive ...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-65952

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79180

CVE-2026-79180 is a UI misrepresentation vulnerability in the CustomTabs feature of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can leverage social engineering by serving a crafted HTML page to spoof UI elements, potentially deceiving users into interacting with ma...

CVE-2026-79180

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79180

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79191

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79191

CVE-2026-79191 is an incorrect authorization flaw in the SiteIsolation feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage social engineering to bypass site isolation using a crafted HTML page. The Chromium security sev...

CVE-2026-79276

CVE-2026-79276 is an improper privilege management vulnerability in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can bypass system access restrictions by getting a user to interact with a crafted HTML page . The Chromium sec...

CVE-2026-79191

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79143

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79143

CVE-2026-79143 is an incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass system access restrictions via a crafted HTML page. The CVSS 3.1 score is 4.3 (Medium) , requiring user int...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering can potentially bypass system access restrictions via a crafted HTML page, resulting in a low impact on integrity with no i...

EUVD-2026-65902

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...