214880 matches found
CVE-2026-79213
A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...
CVE-2026-79218
An incorrect authorization flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500311587...
CVE-2026-79215
A flaw was found in Chromium's WebGL component. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox...
CVE-2026-79208
A flaw was found in Chromium. Missing authorization in the HTTP2 protocol could allow a remote attacker to leak sensitive information. This vulnerability is exploited by crafting specific network traffic, leading to unauthorized disclosure of data...
CVE-2026-79206
A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the FileSystem component allows a remote attacker to read memory outside of the sandbox. This can be exploited by leveraging social engineering to trick a user into visiting a specially crafted HTML page, leading to...
CVE-2026-79211
A flaw was found in Google Chrome's USB component. This incorrect authorization vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page...
CVE-2026-79202
A flaw was found in Chromecast within Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further syste...
CVE-2026-79209
A flaw was found in Google Chrome's Animation component. A remote attacker could exploit a type confusion vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code within the browser's sandbox, leading to unauthorized actions or data...
CVE-2026-79205
A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...
CVE-2026-79203
An improper input validation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532182486...
CVE-2026-79201
A flaw was found in Chromium. Improper access control in the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actions...
CVE-2026-79198
A flaw was found in Google Chrome. This use-after-free vulnerability in the Platform component allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can bypass security restrictions and run malicious code within the browser's...
CVE-2026-79191
An incorrect authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517606780...
CVE-2026-79200
A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise...
CVE-2026-79187
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the WebRTC component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to...
CVE-2026-79178
A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys component, related to incorrect authorization. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass the web origin polic...
CVE-2026-79194
An use after free flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515470739...
CVE-2026-79189
A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...
CVE-2026-79182
A flaw was found in Media in Google Chrome. Improper input validation could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...
CVE-2026-79175
A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...
CVE-2026-79180
A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...
CVE-2026-79183
A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the Accessibility component of Google Chrome, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation requires social engineering and user interaction with...
CVE-2026-79174
A flaw was found in Extensions in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. By crafting a malicious HTML page, the attacker can gain unauthorized access to privileged pages...
CVE-2026-79155
A race condition flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522294538...
CVE-2026-79149
A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...
CVE-2026-79150
A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to significant security compromise...
CVE-2026-79141
A flaw was found in Google Chrome Browser. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions within the browser...
CVE-2026-79139
A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...
CVE-2026-79142
A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...
CVE-2026-79138
A flaw was found in chromium-browser. An out-of-bounds write vulnerability in ANGLE, a component used for graphics rendering, could allow a remote attacker to execute malicious code. This vulnerability can be exploited by tricking a user into visiting a specially crafted web page. Successful...
CVE-2026-79140
A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...
CVE-2026-79131
A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the...
CVE-2026-79130
A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox, potentiall...
CVE-2026-79128
A flaw was found in Chromium. A use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-79127
A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of...
CVE-2026-79121
A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...
CVE-2026-79116
A flaw was found in Viz in Google Chrome. Missing authorization allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized...
CVE-2026-79103
A flaw was found in Google Chrome's Speech component. This vulnerability involves incorrect reference resolution, which a remote attacker can exploit to bypass site isolation. The attacker needs to have compromised the renderer process and then trick a user into visiting a specially crafted HTML...
CVE-2026-79110
A flaw was found in chromium-browser. This missing authorization vulnerability in the Preload component allows a remote attacker to bypass the web origin policy by tricking a user into opening a specially crafted HTML page. This could lead to unauthorized access to sensitive information or action...
CVE-2026-79097
A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the sandbox environment, potentially leading to a compromise of the affected...
CVE-2026-79094
A flaw was found in the Workers component of Google Chrome. This race condition vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, an attacker can exploit this flaw, leading to unauthorized access within the system...
CVE-2026-79111
A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...
CVE-2026-79093
A flaw was found in Paint in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origins...
CVE-2026-79083
A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...
CVE-2026-79076
A flaw was found in chromium-browser. Improper input validation within the Sync component of Google Chrome allows a remote attacker to obtain sensitive information. This vulnerability can be exploited by sending specially crafted network traffic...
CVE-2026-79078
A flaw was found in the Federated Credential Management FedCM component of Google Chrome. This vulnerability, known as a use-after-free, allows a remote attacker to execute unauthorized code outside of the browser's security protections. By leveraging social engineering tactics and a specially...
CVE-2026-79073
A flaw was found in the Parser component of Google Chrome. This vulnerability, caused by improper state validation, allows a remote attacker to potentially execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page. This coul...
CVE-2026-19385
A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...
CVE-2026-78893
A flaw was found in Google Chrome's implementation of QUIC Quick UDP Internet Connections. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive information...