Medium-severity CVEs (page 56)
Page 56 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-79144 | Medium | 4.3 | 2026-08-25 | Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium secur… |
CVE-2026-79143 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79141 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |
CVE-2026-79137 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79136 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-79134 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML pa… |
CVE-2026-79133 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Ch… |
CVE-2026-79126 | Medium | 5.9 | 2026-08-25 | Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtai… |
CVE-2026-79125 | Medium | 6.5 | 2026-08-25 | Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium sec… |
CVE-2026-79124 | Medium | 6.5 | 2026-08-25 | Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML pa… |
CVE-2026-79123 | Medium | 6.5 | 2026-08-25 | Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces… |
CVE-2026-79122 | Medium | 5.9 | 2026-08-25 | Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chro… |
CVE-2026-79120 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML pa… |
CVE-2026-79118 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-79117 | Medium | 4.3 | 2026-08-25 | Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web or… |
CVE-2026-79116 | Medium | 4.3 | 2026-08-25 | Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin po… |
CVE-2026-79112 | Medium | 6.5 | 2026-08-25 | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the… |
CVE-2026-79110 | Medium | 4.3 | 2026-08-25 | Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromi… |
CVE-2026-79108 | Medium | 6.5 | 2026-08-25 | UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engin… |
CVE-2026-79107 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted ne… |
CVE-2026-79106 | Medium | 4.3 | 2026-08-25 | Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged soc… |
CVE-2026-79105 | Medium | 4.3 | 2026-08-25 | Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craf… |
CVE-2026-79104 | Medium | 5.3 | 2026-08-25 | Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive… |
CVE-2026-79099 | Medium | 6.5 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page… |
CVE-2026-79098 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements… |
CVE-2026-79095 | Medium | 4.3 | 2026-08-25 | Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium s… |
CVE-2026-79094 | Medium | 6.5 | 2026-08-25 | Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chro… |
CVE-2026-79093 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML p… |
CVE-2026-79089 | Medium | 5.3 | 2026-08-25 | Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass… |
CVE-2026-79088 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79087 | Medium | 4.3 | 2026-08-25 | Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML… |
CVE-2026-79086 | Medium | 5.1 | 2026-08-25 | Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-ins… |
CVE-2026-79085 | Medium | 4.3 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origi… |
CVE-2026-79084 | Medium | 4.3 | 2026-08-25 | Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering t… |
CVE-2026-79082 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-79077 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML… |
CVE-2026-79076 | Medium | 6.5 | 2026-08-25 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic… |
CVE-2026-79075 | Medium | 6.5 | 2026-08-25 | Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information… |
CVE-2026-79074 | Medium | 5.3 | 2026-08-25 | Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive info… |
CVE-2026-79070 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-79068 | Medium | 4.3 | 2026-08-25 | Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privi… |
CVE-2026-79067 | Medium | 4.3 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system ac… |
CVE-2026-79065 | Medium | 4.3 | 2026-08-25 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web o… |
CVE-2026-79060 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2026-79055 | Medium | 5.1 | 2026-08-25 | Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive in… |
CVE-2026-79051 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
CVE-2026-79050 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa… |
CVE-2026-79049 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafte… |
CVE-2026-79046 | Medium | 4.3 | 2026-08-25 | Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origi… |
CVE-2026-79044 | Medium | 5.3 | 2026-08-25 | Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces… |
CVE-2026-79042 | Medium | 4.3 | 2026-08-25 | Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially… |
CVE-2026-79041 | Medium | 4.3 | 2026-08-25 | Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin… |
CVE-2026-79040 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted… |
CVE-2026-79038 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page… |
CVE-2026-79032 | Medium | 6.8 | 2026-08-25 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass syste… |
CVE-2026-79030 | Medium | 5.3 | 2026-08-25 | Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-79028 | Medium | 5.3 | 2026-08-25 | Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C… |
CVE-2026-79025 | Medium | 4.2 | 2026-08-25 | Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass syste… |
CVE-2026-79024 | Medium | 6.5 | 2026-08-25 | Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C… |
CVE-2026-79023 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-79022 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially sp… |
CVE-2026-79021 | Medium | 6.5 | 2026-08-25 | Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass sy… |
CVE-2026-79018 | Medium | 6.5 | 2026-08-25 | Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Ch… |
CVE-2026-79017 | Medium | 6.5 | 2026-08-25 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extens… |
CVE-2026-79016 | Medium | 4.3 | 2026-08-25 | Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-79015 | Medium | 4.3 | 2026-08-25 | Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted… |
CVE-2026-79014 | Medium | 4.3 | 2026-08-25 | Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin poli… |
CVE-2026-79013 | Medium | 5.9 | 2026-08-25 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic… |
CVE-2026-79010 | Medium | 4.3 | 2026-08-25 | Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render… |
CVE-2026-79009 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H… |
CVE-2026-79006 | Medium | 4.3 | 2026-08-25 | Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network… |
CVE-2026-79005 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2026-79003 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restr… |
CVE-2026-79001 | Medium | 5.3 | 2026-08-25 | Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leverage… |
CVE-2026-79000 | Medium | 4.3 | 2026-08-25 | Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to b… |
CVE-2026-78991 | Medium | 5.3 | 2026-08-25 | Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive inf… |
CVE-2026-78987 | Medium | 4.3 | 2026-08-25 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec… |
CVE-2026-78981 | Medium | 6.5 | 2026-08-25 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local p… |
CVE-2026-78980 | Medium | 4.3 | 2026-08-25 | Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin po… |
CVE-2026-78979 | Medium | 4.3 | 2026-08-25 | Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin polic… |
CVE-2026-78977 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via… |
CVE-2026-78976 | Medium | 4.3 | 2026-08-25 | Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to byp… |
CVE-2026-78975 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro… |
CVE-2026-78974 | Medium | 5.4 | 2026-08-25 | UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system… |
CVE-2026-78969 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (C… |
CVE-2026-78968 | Medium | 6.5 | 2026-08-25 | Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof a… |
CVE-2026-78967 | Medium | 6.5 | 2026-08-25 | Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system ac… |
CVE-2026-78966 | Medium | 4.3 | 2026-08-25 | Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-78965 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-78962 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origi… |
CVE-2026-78961 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social… |
CVE-2026-78960 | Medium | 6.5 | 2026-08-25 | Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via… |
CVE-2026-78959 | Medium | 6.5 | 2026-08-25 | Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass s… |
CVE-2026-78957 | Medium | 5.5 | 2026-08-25 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chro… |
CVE-2026-78955 | Medium | 6.5 | 2026-08-25 | Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a craft… |
CVE-2026-78954 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web… |
CVE-2026-78947 | Medium | 6.5 | 2026-08-25 | Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via… |
CVE-2026-78946 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
CVE-2026-78942 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traf… |
CVE-2026-78940 | Medium | 4.3 | 2026-08-25 | Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |