CVE-2026-78898

An incorrect authorization flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499423269...

CVE-2026-74687

A flaw was found in the Linux kernel, specifically within the at91sam9wdt watchdog timer driver. During the driver's teardown process, the at91ping function could rearm the watchdog timer. However, the timerdelete function does not prevent this, resulting in a use-after-free vulnerability where t...

CVE-2026-73479

A flaw was found in dua-cli. This vulnerability allows attackers to craft malicious file names containing terminal escape sequences, specifically Operating System Command OSC or Control Sequence Introducer CSI sequences. When these marked file paths are printed after exiting the Text-based User...

CVE-2026-79226

A flaw was found in chromium-browser. This vulnerability, related to improper privilege management in Regional Capabilities, allows a remote attacker to bypass system access restrictions. By leveraging social engineering and a crafted Chrome extension, an attacker can gain unauthorized access...

CVE-2026-79221

An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532923954...

CVE-2026-79234

A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...

CVE-2026-79229

A flaw was found in ANGLE, a component within Chromium. This uninitialized resource vulnerability could allow a remote attacker, who has already compromised the renderer process, to read sensitive memory outside of the security sandbox. This exploitation can occur by tricking a user into visiting...

CVE-2026-79193

An information leak flaw was found in the Canvas component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517655953...

CVE-2026-79192

A flaw was found in Google Chrome. This improper input validation vulnerability, specifically within the Variations component, could allow a remote attacker to bypass the web origin policy. This bypass is achieved by sending specially crafted network traffic, potentially leading to unauthorized...

CVE-2026-79214

A flaw was found in Chromium. Improper input validation within the Preload component allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by crafting a malicious HTML page, leading to unauthorized access to data o...

CVE-2026-79212

A flaw was found in Google Chrome. This vulnerability, stemming from missing authorization in the Passwords component, could allow a remote attacker to bypass the web origin policy. To exploit this, the attacker would first need to compromise the browser's renderer process and employ social...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-79186

A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...

CVE-2026-79185

A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...

CVE-2026-79144

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501759192...

CVE-2026-79204

A flaw was found in chromium-browser. A remote attacker could exploit a user interface UI misrepresentation vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to spoof UI elements, potentially leading to confusion or deception of the user...

CVE-2026-79154

A flaw was found in chromium-browser. This missing authorization vulnerability in DevTools allows a remote attacker to exploit the system. By leveraging social engineering and user interface interaction, an attacker can obtain sensitive information...

CVE-2026-79137

An incorrect authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505951430...

CVE-2026-79176

A flaw was found in Google Chrome. This user interface UI misrepresentation in the Extensions feature allows a remote attacker to leverage social engineering techniques. By tricking a user into installing a specially crafted Chrome extension, the attacker can obtain sensitive information from the...

CVE-2026-79134

An incorrect authorization flaw was found in the GetUserMedia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522351802...

CVE-2026-79132

A flaw was found in Google Chrome on Android. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker provid...

CVE-2026-79120

A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page...

CVE-2026-79119

A flaw was found in Google Chrome. This use-after-free vulnerability in the PDF component allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to open a specially crafted PDF file...

CVE-2026-79133

A flaw was found in chromium-browser. A remote attacker could exploit an incorrect authorization vulnerability in the Forms component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-79107

A flaw was found in Google Chrome. Incorrect authorization within the TabGroups feature could allow a remote attacker to exploit this vulnerability. By sending crafted network traffic, an attacker could potentially leak sensitive information from the user's browser...

CVE-2026-79117

A flaw was found in WebAppInstalls in Google Chrome on Android. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a co-installed application, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or actions...

CVE-2026-79095

A flaw was found in Chromium. This vulnerability, located in the Payments component, allows a remote attacker to obtain sensitive cross-origin data. Exploitation occurs when a user visits a specially crafted HTML page, leading to an information leak...

CVE-2026-79118

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-79085

A flaw was found in Chromium's Network component. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across...

CVE-2026-79075

An information leak flaw was found in the Geolocation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533093250...

CVE-2026-79087

A flaw was found in Chromium. This injection vulnerability, specifically within Chrome Tabs, allows a remote attacker to potentially bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to unauthorized access within the syste...

CVE-2026-79098

A flaw was found in Google Chrome. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to misrepresent user interface UI elements. This misrepresentation could allow the attacker to spoof UI elements, potentially deceiving users...

CVE-2026-79104

A flaw was found in Google Chrome. Missing authorization in the Sensor component could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation occurs when the attacker provides a specially crafted HTML page, leading to...

CVE-2026-79086

A flaw was found in CustomTabs in Google Chrome on Android. This missing authorization vulnerability allows a local attacker, through a co-installed application, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...

CVE-2026-79084

A flaw was found in Google Chrome's Notifications component. This vulnerability, caused by inadequate encryption strength, allows a remote attacker to bypass the web origin policy. By leveraging social engineering with a crafted HTML page, an attacker can exploit this flaw, potentially leading to...

CVE-2026-79082

A flaw was found in the Transactions Platform of Google Chrome. An attacker who has compromised the renderer process could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow them to bypass the web origin policy, potentially leading to unauthorized...

CVE-2026-79074

A flaw was found in Google Chrome's Network component. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information, leading to an information leak...

CVE-2026-79292

A flaw was found in Chromecast within Google Chrome. An integer overflow vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox environment. This exploitation can occur by tricking a user into visiting...

CVE-2026-79290

A flaw was found in Google Chrome. A use after free vulnerability exists in the Aura component, which could allow a remote attacker to execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to significant security...

CVE-2026-79282

A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitati...

CVE-2026-79285

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure...

CVE-2026-79286

A flaw was found in Chromium-browser. Missing authorization in CustomTabs on Android allows a local attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be exploited via a co-installed application, leading to a compromise of the system beyond its intended...

CVE-2026-79267

A flaw was found in chromium-browser. A race condition in the Workers component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This bypass was achieved by tricking a user into opening a specially crafted HTML page, potentially leading...

CVE-2026-79270

A flaw was found in chromium-browser. A remote attacker could exploit an uninitialized resource vulnerability in ANGLE by crafting a malicious HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox...

CVE-2026-79257

A flaw was found in Chromium. A use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79255

A flaw was found in WebRTC, a real-time communication component within Chromium. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by tricking the user into visiting...

CVE-2026-79252

A flaw was found in the ServiceWorker component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other websites cross-origin...

CVE-2026-79248

A flaw was found in Google Chrome. This incorrect authorization in the Input component allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by presenting a specially crafted HTML page, leading to a security boundary...

CVE-2026-79275

A flaw was found in ANGLE, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. The attacker could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2026-79249

A flaw was found in Google Chrome's Bisection component. This code injection vulnerability allows a remote attacker to obtain sensitive information by tricking a user into processing a specially crafted file. This could lead to unauthorized access to confidential data...