CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

1.934 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-79137 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79136 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79134 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79133 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79107 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-79093 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79088 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79082 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79077 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79060 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79051 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79050 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79038 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79023 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79005 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79003 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79002 Low · 3.1 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78975 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78961 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78954 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78946 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78911 High · 8.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78907 Medium · 6.5 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78898 Medium · 5.4 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78892 High · 7.1 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Medium)