Google vulnerabilities

CVE-2026-79198 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79197 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79196 Medium · 5.3 CWE-367 Aug 25, 2026

TOCTOU Race Condition in Google Chrome

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79195 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79194 High · 8.1 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)

CVE-2026-79193 Medium · 4.3 CWE-200 Aug 25, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79192 Medium · 4.3 CWE-20 Aug 25, 2026

Improper Input Validation in Google Chrome

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-79191 Low · 3.1 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79190 Medium · 4.3 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79189 Critical · 9.6 CWE-787 Aug 25, 2026

Out-of-bounds Write in Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79188 Critical · 9.6 CWE-787 Aug 25, 2026

Out-of-bounds Write in Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79187 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79186 Low · 3.1 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79185 Medium · 4.3 CWE-200 Aug 25, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79184 Medium · 4.3 CWE-862 Aug 25, 2026

Missing Authorization in Google Chrome

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79183 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

CVE-2026-79182 High · 8.8 CWE-20 Aug 25, 2026

Improper Input Validation in Google Chrome

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79181 Medium · 5.3 CWE-203 Aug 25, 2026

Observable Discrepancy in Google Chrome

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79180 Medium · 5.4 CWE-451 Aug 25, 2026

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79179 Medium · 6.5 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79178 Medium · 4.3 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79177 Medium · 6.5 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79176 Medium · 6.5 CWE-451 Aug 25, 2026

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a…

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-79175 High · 8.3 CWE-843 Aug 25, 2026

Type Confusion in Google Chrome

Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79174 Medium · 4.3 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)