Google vulnerabilities

CVE-2026-78906 High · 7.5 CWE-362 Aug 25, 2026

Race Condition in Google Chrome

Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78905 High · 8.8 CWE-843 Aug 25, 2026

Type Confusion in Google Chrome

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78904 Critical · 9.6 CWE-843 Aug 25, 2026

Type Confusion in Google Chrome

Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78903 Low · 3.1 CWE-459 Aug 25, 2026

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a…

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78901 High · 7.5 CWE-362 Aug 25, 2026

Race Condition in Google Chrome

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78900 Critical · 9.6 CWE-20 Aug 25, 2026

Improper Input Validation in Google Chrome

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78899 High · 8.8 CWE-416 Aug 25, 2026

Use After Free in Google Chrome

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78898 Medium · 5.4 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78897 Medium · 6.5 CWE-862 Aug 25, 2026

Missing Authorization in Google Chrome

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-78896 Medium · 4.3 CWE-200 Aug 25, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-78895 Medium · 4.3 CWE-200 Aug 25, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78894 Low · 3.1 CWE-367 Aug 25, 2026

TOCTOU Race Condition in Google Chrome

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78893 Medium · 6.5 CWE-200 Aug 25, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78892 High · 7.1 CWE-863 Aug 25, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Medium)

CVE-2026-78891 High · 8.8 CWE-122 Aug 25, 2026

Heap-based Buffer Overflow in Google Chrome

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-36940 High · 8.8 CWE-416 Aug 24, 2026

Use After Free in Google Android

Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

CVE-2025-36939 Medium · 5.7 CWE-121 Aug 24, 2026

Stack-based Buffer Overflow in Google Nest Wifi Router Firmware

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

CVE-2026-76023 High · 8.8 CWE-913 Aug 20, 2026

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173...

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76022 High · 8.8 CWE-122 Aug 20, 2026

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76021 High · 8.8 CWE-416 Aug 20, 2026

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76020 High · 7.5 CWE-367 Aug 20, 2026

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76019 High · 8.1 CWE-863 Aug 20, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76018 High · 8.8 CWE-250 Aug 20, 2026

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

CVE-2026-76017 High · 8.8 CWE-416 Aug 20, 2026

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

CVE-2026-76047 High · 8.8 CWE-843 Aug 18, 2026

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)