Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 16512 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-79267 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79269 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79270 1 Google 1 Chrome 2026-08-31 N/A 6.5 MEDIUM
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79271 1 Google 1 Chrome 2026-08-31 N/A 6.5 MEDIUM
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79050 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79049 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium)
CVE-2026-79070 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79066 1 Google 1 Chrome 2026-08-31 N/A 3.1 LOW
Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79065 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79068 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79032 1 Google 1 Chrome 2026-08-31 N/A 6.8 MEDIUM
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79067 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79053 1 Google 1 Chrome 2026-08-31 N/A 3.1 LOW
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79051 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79060 1 Google 1 Chrome 2026-08-31 N/A 6.5 MEDIUM
Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79058 1 Google 1 Chrome 2026-08-31 N/A 9.1 CRITICAL
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79059 1 Google 1 Chrome 2026-08-31 N/A 3.1 LOW
Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79088 1 Google 1 Chrome 2026-08-31 N/A 6.5 MEDIUM
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79118 1 Google 1 Chrome 2026-08-31 N/A 4.3 MEDIUM
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79272 1 Google 1 Chrome 2026-08-31 N/A 3.1 LOW
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)