254 matches found
CVE-2026-79152
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Low...
CVE-2026-79152
CVE-2026-79152 is an incorrect authorization flaw in CustomTabs within Google Chrome for Android prior to 152.0.7977.65 . A local attacker can exploit a co-installed app to bypass the web origin policy . Chromium classifies this as Low severity, though the CNA-assigned CVSS 3.1 score is 9.8 (CRIT...
CVE-2026-78947
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-78947
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-66063
Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79060
Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79041
CVE-2026-79041 is a missing authorization flaw in the Browser component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can leverage social engineering to trick a user into opening a crafted HTML page, which bypasses the web origin policy and grants access ...
CVE-2026-79041
Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78946
An incorrect authorization vulnerability in the Select component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. Per Red Hat, this could lead to unauthorized access to sensitive information or actions across differ...
CVE-2026-79243
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79190
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79190
CVE-2026-79190 is an incorrect authorization flaw in Google Chrome Extensions , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorize...
CVE-2026-79190
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79000
Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-79184
CVE-2026-79184 is a missing authorization flaw in the Preload feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass the web origin policy , leading to unauthorized access or actions a...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79141
CVE-2026-79141 is an incorrect authorization vulnerability in the Google Chrome browser, affecting versions prior to 152.0.7977.65 . A remote attacker can bypass the web origin policy by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitiv...
CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79085
CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can bypass the web origin policy via a crafted HTML page, potentially gaining unauthorized access to sensitive infor...