CVE-2026-79260

CVE-2026-79260 is a Low severity vulnerability in Google Chrome prior to 152.0.7977.65 , caused by improper input validation in the Cookies component. A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to bypass the web origin policy...

CVE-2026-79152

CVE-2026-79152 is an incorrect authorization flaw in CustomTabs within Google Chrome on Android prior to 152.0.7977.65 . The vulnerability allowed a local attacker to bypass the web origin policy by leveraging a co-installed app, effectively breaking the isolation boundary that CustomTabs provide...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-78946

CVE-2026-78946 is an incorrect authorization vulnerability in the Select component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage this flaw via a crafted HTML page to bypass the web origin policy , potentially allowing cross-origin data access that would normally be bl...

CVE-2026-79190

CVE-2026-79190 is an incorrect authorization flaw in the Extensions component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium assigned this a Low security...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79141

Google Chrome prior to 152.0.7977.65 contained an incorrect authorization flaw in the Browser component. A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy . Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.65 ...

CVE-2026-79085

CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin resources that...

CVE-2026-79269

CVE-2026-79269 is an uninitialized resource vulnerability in ANGLE , a component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to potentially bypass the web origin policy . Chromium rates the severity as Medium . The fix is available in Chr...

CVE-2026-79238

CVE-2026-79238 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can use a crafted Chrome extension to bypass web origin policy . Chromium rates the severity as Medium . The fix is available ...

CVE-2026-79051

CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could bypass web origin policy by serving a crafted HTML page to a victim. The Chromium security team rates this as Medium severity. No evidence o...

CVE-2026-78943

CVE-2026-78943 is an improper input validation vulnerability in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass the web origin policy using a crafted HTML page. The Chrom...

CVE-2026-79255

CVE-2026-79255 is an improper input validation vulnerability in WebRTC within Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. Chromium classified the securi...

CVE-2026-78940

CVE-2026-78940 is an improper initialization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium . Remediation is to ...

CVE-2026-79248

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in the Input component. A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is rated Medium , reflecting t...

CVE-2026-79110

CVE-2026-79110 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is a missing authorization in the Preload component, allowing a remote attacker to bypass the web origin policy via a crafted HTML page. Chromium rates the severity as Medium . No in-the-wild exploitation details are ...

CVE-2026-78942

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in the Loader component. A remote attacker can exploit this via crafted network traffic to bypass the web origin policy . Chromium classifies the severity as Medium . No exploitation or exploit code has bee...

CVE-2026-79192

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium rates the security severity as Medium . No exploitation details are provided in the available docume...

CVE-2026-79267

CVE-2026-79267 is a race condition in Workers affecting Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. Chromium rated the severity as Medium . The vulnerability is fixed i...

CVE-2026-79106

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Input component. A remote attacker who had already compromised the renderer process and leveraged social engineering could bypass the web origin policy using a crafted HTML page. The Chromium security tea...