CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79141

Google Chrome prior to 152.0.7977.65 contained an incorrect authorization flaw in the Browser component. A remote attacker could exploit this by serving a crafted HTML page to bypass the web origin policy . Chromium classified the severity as Medium . The fix is available in Chrome 152.0.7977.65 ...

CVE-2026-79085

CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin resources that...

CVE-2026-79269

CVE-2026-79269 is an uninitialized resource vulnerability in ANGLE , a component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to potentially bypass the web origin policy . Chromium rates the severity as Medium . The fix is available in Chr...

CVE-2026-79238

CVE-2026-79238 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can use a crafted Chrome extension to bypass web origin policy . Chromium rates the severity as Medium . The fix is available ...

CVE-2026-79238

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79051

CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could bypass web origin policy by serving a crafted HTML page to a victim. The Chromium security team rates this as Medium severity. No evidence o...

CVE-2026-78943

CVE-2026-78943 is an improper input validation vulnerability in the Editing component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass the web origin policy using a crafted HTML page. The Chrom...

CVE-2026-79255

CVE-2026-79255 is an improper input validation vulnerability in WebRTC within Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy using a crafted HTML page. Chromium classified the securi...

CVE-2026-78940

CVE-2026-78940 is an improper initialization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit this flaw by serving a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Medium . Remediation is to ...

CVE-2026-79248

Google Chrome prior to 152.0.7977.65 contains an incorrect authorization flaw in the Input component. A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is rated Medium , reflecting t...

CVE-2026-79110

CVE-2026-79110 affects Google Chrome prior to 152.0.7977.65 . The vulnerability is a missing authorization in the Preload component, allowing a remote attacker to bypass the web origin policy via a crafted HTML page. Chromium rates the severity as Medium . No in-the-wild exploitation details are ...

CVE-2026-78942

Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in the Loader component. A remote attacker can exploit this via crafted network traffic to bypass the web origin policy . Chromium classifies the severity as Medium . No exploitation or exploit code has bee...

CVE-2026-79192

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium rates the security severity as Medium . No exploitation details are provided in the available docume...

EUVD-2026-65865

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79267

CVE-2026-79267 is a race condition in Workers affecting Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass the web origin policy by serving a crafted HTML page. Chromium rated the severity as Medium . The vulnerability is fixed i...

CVE-2026-79106

Google Chrome prior to 152.0.7977.65 is affected by an improper input validation flaw in the Input component. A remote attacker who had already compromised the renderer process and leveraged social engineering could bypass the web origin policy using a crafted HTML page. The Chromium security tea...

CVE-2026-78961

CVE-2026-78961 is an incorrect authorization vulnerability in the Core component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can craft an HTML page that bypasses the web origin policy . The C...

EUVD-2026-65837

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...