Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)
Chromium: CVE-2026-79004 Out of bounds read in Media
CVE-2026-19161 Uninitialized Use in Skia
Chromium: CVE-2026-79034 Information leak in CORS
Chromium: CVE-2026-79203 Improper input validation in DevTools
Chromium: CVE-2026-16417 Uninitialized Use in Skia
Chromium: CVE-2026-17997 Inappropriate implementation in Passwords
Chromium: CVE-2026-79103 Incorrect reference resolution in Speech
Chromium: CVE-2026-78903 Incomplete cleanup in SiteIsolation
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
Chromium: CVE-2026-11690 Out of bounds read and write in Media
Chromium: CVE-2026-11674 Use after free in Guest View
Chromium: CVE-2026-11683 Use after free in WebCodecs
Chromium: CVE-2026-12458 Incorrect security UI in Passwords
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
Chromium: CVE-2026-12017 Insufficient validation of untrusted input Extensions
Chromium: CVE-2026-78953 Missing authorization in SiteIsolation
Chromium: CVE-2026-10011 Inappropriate implementation in Skia
Chromium: CVE-2026-84359 Information leak in Skia
Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture
Chromium: CVE-2026-9959 Race in WebRTC
Chromium: CVE-2026-9944 Uninitialized Use in ANGLE
Chromium CVE-2026-85052: Out of bounds read in CrashReporting
Chromium: CVE-2026-8022 Inappropriate implementation in MHTML
Chromium: CVE-2026-7351 Race in MHTML
Chromium: CVE-2026-78941 Information leak in Core