2026 CVEs (page 186)
Page 186 of 672 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-79181 | Medium | 5.3 | 2026-08-25 | Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro… |
CVE-2026-79180 | Medium | 5.4 | 2026-08-25 | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI el… |
CVE-2026-79179 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML p… |
CVE-2026-79178 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin… |
CVE-2026-79177 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to by… |
CVE-2026-79176 | Medium | 6.5 | 2026-08-25 | UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informat… |
CVE-2026-79175 | High | 8.3 | 2026-08-25 | Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to exe… |
CVE-2026-79174 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web… |
CVE-2026-79173 | Medium | 5.4 | 2026-08-25 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromiu… |
CVE-2026-79155 | High | 8.3 | 2026-08-25 | Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute… |
CVE-2026-79154 | Medium | 6.5 | 2026-08-25 | Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informati… |
CVE-2026-79152 | Critical | 9.8 | 2026-08-25 | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-insta… |
CVE-2026-79151 | Medium | 4.3 | 2026-08-25 | Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted… |
CVE-2026-79150 | Critical | 9.6 | 2026-08-25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… |
CVE-2026-79149 | Critical | 9.6 | 2026-08-25 | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-79148 | Critical | 9.1 | 2026-08-25 | Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside… |
CVE-2026-79147 | Medium | 5.3 | 2026-08-25 | Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensi… |
CVE-2026-79146 | Medium | 5.5 | 2026-08-25 | Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed ap… |
CVE-2026-79144 | Medium | 4.3 | 2026-08-25 | Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium secur… |
CVE-2026-79143 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79142 | High | 8.8 | 2026-08-25 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-79141 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |
CVE-2026-79140 | Critical | 9.6 | 2026-08-25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… |
CVE-2026-79139 | High | 7.5 | 2026-08-25 | Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-79138 | Critical | 9.6 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the… |
CVE-2026-79137 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79136 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-79134 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML pa… |
CVE-2026-79133 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Ch… |
CVE-2026-79132 | High | 8.3 | 2026-08-25 | Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-79131 | Critical | 9.6 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-79130 | Critical | 9.6 | 2026-08-25 | Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-79129 | Critical | 9.6 | 2026-08-25 | Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary c… |
CVE-2026-79128 | Critical | 9.6 | 2026-08-25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… |
CVE-2026-79127 | High | 8.8 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-79126 | Medium | 5.9 | 2026-08-25 | Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtai… |
CVE-2026-79125 | Medium | 6.5 | 2026-08-25 | Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium sec… |
CVE-2026-79124 | Medium | 6.5 | 2026-08-25 | Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML pa… |
CVE-2026-79123 | Medium | 6.5 | 2026-08-25 | Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces… |
CVE-2026-79122 | Medium | 5.9 | 2026-08-25 | Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chro… |
CVE-2026-79121 | High | 8.3 | 2026-08-25 | Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potential… |
CVE-2026-79120 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML pa… |
CVE-2026-79119 | High | 8.8 | 2026-08-25 | Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (C… |
CVE-2026-79118 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-79117 | Medium | 4.3 | 2026-08-25 | Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web or… |
CVE-2026-79116 | Medium | 4.3 | 2026-08-25 | Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin po… |
CVE-2026-79112 | Medium | 6.5 | 2026-08-25 | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the… |
CVE-2026-79111 | Critical | 9.6 | 2026-08-25 | Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v… |
CVE-2026-79110 | Medium | 4.3 | 2026-08-25 | Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromi… |
CVE-2026-79109 | High | 8.3 | 2026-08-25 | Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-79108 | Medium | 6.5 | 2026-08-25 | UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engin… |
CVE-2026-79107 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted ne… |
CVE-2026-79106 | Medium | 4.3 | 2026-08-25 | Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged soc… |
CVE-2026-79105 | Medium | 4.3 | 2026-08-25 | Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craf… |
CVE-2026-79104 | Medium | 5.3 | 2026-08-25 | Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive… |
CVE-2026-79103 | Low | 3.1 | 2026-08-25 | Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass s… |
CVE-2026-79099 | Medium | 6.5 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page… |
CVE-2026-79098 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements… |
CVE-2026-79097 | High | 8.8 | 2026-08-25 | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-79095 | Medium | 4.3 | 2026-08-25 | Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium s… |
CVE-2026-79094 | Medium | 6.5 | 2026-08-25 | Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chro… |
CVE-2026-79093 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML p… |
CVE-2026-79091 | Critical | 9.6 | 2026-08-25 | Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
CVE-2026-79090 | Critical | 9.8 | 2026-08-25 | Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access… |
CVE-2026-79089 | Medium | 5.3 | 2026-08-25 | Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass… |
CVE-2026-79088 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r… |
CVE-2026-79087 | Medium | 4.3 | 2026-08-25 | Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML… |
CVE-2026-79086 | Medium | 5.1 | 2026-08-25 | Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-ins… |
CVE-2026-79085 | Medium | 4.3 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origi… |
CVE-2026-79084 | Medium | 4.3 | 2026-08-25 | Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering t… |
CVE-2026-79083 | High | 7.5 | 2026-08-25 | Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… |
CVE-2026-79082 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-79078 | Critical | 9.6 | 2026-08-25 | Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the s… |
CVE-2026-79077 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML… |
CVE-2026-79076 | Medium | 6.5 | 2026-08-25 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic… |
CVE-2026-79075 | Medium | 6.5 | 2026-08-25 | Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information… |
CVE-2026-79074 | Medium | 5.3 | 2026-08-25 | Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive info… |
CVE-2026-79073 | High | 8.8 | 2026-08-25 | Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… |
CVE-2026-79072 | High | 8.1 | 2026-08-25 | Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a… |
CVE-2026-79071 | High | 8.3 | 2026-08-25 | Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra… |
CVE-2026-79070 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-79069 | High | 8.8 | 2026-08-25 | Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-79068 | Medium | 4.3 | 2026-08-25 | Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privi… |
CVE-2026-79067 | Medium | 4.3 | 2026-08-25 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system ac… |
CVE-2026-79066 | Low | 3.1 | 2026-08-25 | Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass si… |
CVE-2026-79065 | Medium | 4.3 | 2026-08-25 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web o… |
CVE-2026-79064 | Critical | 9.6 | 2026-08-25 | Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code o… |
CVE-2026-79060 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2026-79059 | Low | 3.1 | 2026-08-25 | Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin d… |
CVE-2026-79058 | Critical | 9.1 | 2026-08-25 | Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI eleme… |
CVE-2026-79057 | High | 8.1 | 2026-08-25 | Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arb… |
CVE-2026-79056 | Critical | 9.6 | 2026-08-25 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via… |
CVE-2026-79055 | Medium | 5.1 | 2026-08-25 | Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive in… |
CVE-2026-79054 | High | 8.3 | 2026-08-25 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary co… |
CVE-2026-79053 | Low | 3.1 | 2026-08-25 | Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged so… |
CVE-2026-79052 | Critical | 9.6 | 2026-08-25 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-79051 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
CVE-2026-79050 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa… |
CVE-2026-79049 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafte… |
CVE-2026-79048 | High | 8.8 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the s… |