Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
32139 vulnerabilities by Google
CVE-2026-82072 (GCVE-0-2026-82072)
Vulnerability from nvd – Published: 2026-08-27 23:04 – Updated: 2026-08-29 03:55
VLAI
EPSS
VEX
Summary
Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 00:00 UTC
CWE
- CWE-125 - Out of bounds read
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-82072",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-29T03:55:59.351Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "151.0.7922.72",
"status": "affected",
"version": "151.0.7922.72",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out of bounds read",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T23:04:56.296Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
},
{
"url": "https://issues.chromium.org/issues/534416978"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-82072",
"datePublished": "2026-08-27T23:04:56.296Z",
"dateReserved": "2026-08-27T22:53:45.361Z",
"dateUpdated": "2026-08-29T03:55:59.351Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-75062 (GCVE-0-2026-75062)
Vulnerability from nvd – Published: 2026-08-26 14:50 – Updated: 2026-08-27 16:55
VLAI
EPSS
VEX
Title
Eval Injection in google/langfun via default lf.query protocol
Summary
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 15:37 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/google/langfun | product |
| https://github.com/google/langfun/issues/725 | issue-tracking |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75062",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T15:37:45.461767Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T15:38:02.455Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/google/langfun/issues/725"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "langfun",
"product": "langfun",
"repo": "https://github.com/google/langfun",
"vendor": "Google",
"versions": [
{
"lessThan": "0.1.2",
"status": "affected",
"version": "0.0.1",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Hamza Haroon"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eImproper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027) in the default \u003ccode\u003elf.query\u003c/code\u003e Python protocol in Google \u003ccode\u003elangfun\u003c/code\u003e versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.\u003c/p\u003e"
}
],
"value": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox."
}
],
"impacts": [
{
"capecId": "CAPEC-242",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-242: Code Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-95",
"description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1188",
"description": "CWE-1188: Insecure Default Initialization of Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T16:55:00.832Z",
"orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"shortName": "Google"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/google/langfun"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/google/langfun/issues/725"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Eval Injection in google/langfun via default lf.query protocol",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"assignerShortName": "Google",
"cveId": "CVE-2026-75062",
"datePublished": "2026-08-26T14:50:50.604Z",
"dateReserved": "2026-08-17T15:35:22.670Z",
"dateUpdated": "2026-08-27T16:55:00.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79293 (GCVE-0-2026-79293)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:40
VLAI
EPSS
VEX
Summary
Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:15 UTC
CWE
- CWE-200 - Information leak
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79293",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:15:18.646626Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:40:31.941Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information leak",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:35.706Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/517746687"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79293",
"datePublished": "2026-08-25T20:10:35.706Z",
"dateReserved": "2026-08-25T06:13:24.781Z",
"dateUpdated": "2026-08-26T18:40:31.941Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79292 (GCVE-0-2026-79292)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 03:58
VLAI
EPSS
VEX
Summary
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity
8.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-190 - Integer overflow
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79292",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:58:11.241Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "Integer overflow",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:00.880Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/517519352"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79292",
"datePublished": "2026-08-25T20:10:00.880Z",
"dateReserved": "2026-08-25T06:13:24.194Z",
"dateUpdated": "2026-08-27T03:58:11.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79291 (GCVE-0-2026-79291)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:40
VLAI
EPSS
VEX
Summary
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:15 UTC
CWE
- CWE-200 - Information leak
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79291",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:15:49.480477Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:40:01.869Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information leak",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:36.637Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/518023156"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79291",
"datePublished": "2026-08-25T20:10:36.637Z",
"dateReserved": "2026-08-25T06:13:23.105Z",
"dateUpdated": "2026-08-26T18:40:01.869Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79290 (GCVE-0-2026-79290)
Vulnerability from nvd – Published: 2026-08-25 20:09 – Updated: 2026-08-27 03:56
VLAI
EPSS
VEX
Summary
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-416 - Use after free
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:56:17.762Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:09:57.061Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/516427761"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79290",
"datePublished": "2026-08-25T20:09:57.061Z",
"dateReserved": "2026-08-25T06:13:22.445Z",
"dateUpdated": "2026-08-27T03:56:17.762Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79289 (GCVE-0-2026-79289)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-25 20:10
VLAI
EPSS
VEX
Summary
Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
Severity
No CVSS data available.
CWE
- CWE-664 - Improper control of a resource through its lifetime
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-664",
"description": "Improper control of a resource through its lifetime",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:47.625Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/497876969"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79289",
"datePublished": "2026-08-25T20:10:47.625Z",
"dateReserved": "2026-08-25T06:13:21.749Z",
"dateUpdated": "2026-08-25T20:10:47.625Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79287 (GCVE-0-2026-79287)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:41
VLAI
EPSS
VEX
Summary
Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:14 UTC
CWE
- CWE-203 - Observable discrepancy
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79287",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:14:22.258665Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:41:20.088Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-203",
"description": "Observable discrepancy",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:33.551Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/517404644"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79287",
"datePublished": "2026-08-25T20:10:33.551Z",
"dateReserved": "2026-08-25T06:13:19.905Z",
"dateUpdated": "2026-08-26T18:41:20.088Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79285 (GCVE-0-2026-79285)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-28 19:15
VLAI
EPSS
VEX
Summary
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 19:14 UTC
CWE
- CWE-908 - Uninitialized resource
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79285",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T19:14:53.987093Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T19:15:09.002Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-908",
"description": "Uninitialized resource",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:28.901Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/513918923"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79285",
"datePublished": "2026-08-25T20:10:28.901Z",
"dateReserved": "2026-08-25T06:13:10.606Z",
"dateUpdated": "2026-08-28T19:15:09.002Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79284 (GCVE-0-2026-79284)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 19:13
VLAI
EPSS
VEX
Summary
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 19:13 UTC
CWE
- CWE-451 - UI misrepresentation
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79284",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T19:13:18.000663Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T19:13:50.996Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-451",
"description": "UI misrepresentation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:52.901Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/519210950"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79284",
"datePublished": "2026-08-25T20:10:52.901Z",
"dateReserved": "2026-08-25T06:13:09.405Z",
"dateUpdated": "2026-08-26T19:13:50.996Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79283 (GCVE-0-2026-79283)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 18:57
VLAI
EPSS
VEX
Summary
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 18:57 UTC
CWE
- CWE-451 - UI misrepresentation
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79283",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T18:57:22.332517Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T18:57:35.826Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-451",
"description": "UI misrepresentation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:36.819Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/518035396"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79283",
"datePublished": "2026-08-25T20:10:36.819Z",
"dateReserved": "2026-08-25T06:13:08.663Z",
"dateUpdated": "2026-08-27T18:57:35.826Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79282 (GCVE-0-2026-79282)
Vulnerability from nvd – Published: 2026-08-25 20:09 – Updated: 2026-08-27 03:56
VLAI
EPSS
VEX
Summary
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-416 - Use after free
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79282",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:56:18.882Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:09:56.717Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/496807874"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79282",
"datePublished": "2026-08-25T20:09:56.717Z",
"dateReserved": "2026-08-25T06:13:07.569Z",
"dateUpdated": "2026-08-27T03:56:18.882Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79276 (GCVE-0-2026-79276)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-28 18:46
VLAI
EPSS
VEX
Summary
Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 18:42 UTC
CWE
- CWE-269 - Improper privilege management
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79276",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T18:42:40.140589Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T18:46:00.290Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "Improper privilege management",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:34.312Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/517580738"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79276",
"datePublished": "2026-08-25T20:10:34.312Z",
"dateReserved": "2026-08-25T06:12:59.730Z",
"dateUpdated": "2026-08-28T18:46:00.290Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79275 (GCVE-0-2026-79275)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 03:55
VLAI
EPSS
VEX
Summary
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-416 - Use after free
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79275",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:55:54.773Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:08.488Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/536659904"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79275",
"datePublished": "2026-08-25T20:10:08.488Z",
"dateReserved": "2026-08-25T06:12:58.940Z",
"dateUpdated": "2026-08-27T03:55:54.773Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79274 (GCVE-0-2026-79274)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 19:56
VLAI
EPSS
VEX
Summary
Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 19:48 UTC
CWE
- CWE-200 - Information leak
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79274",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T19:48:22.430555Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T19:56:52.515Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information leak",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:09.861Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/543707066"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79274",
"datePublished": "2026-08-25T20:10:09.861Z",
"dateReserved": "2026-08-25T06:12:56.763Z",
"dateUpdated": "2026-08-26T19:56:52.515Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79272 (GCVE-0-2026-79272)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 19:55
VLAI
EPSS
VEX
Summary
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 19:48 UTC
CWE
- CWE-20 - Improper input validation
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79272",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T19:48:42.518572Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T19:55:51.509Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper input validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:32.025Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/516921259"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79272",
"datePublished": "2026-08-25T20:10:32.025Z",
"dateReserved": "2026-08-25T06:12:55.027Z",
"dateUpdated": "2026-08-26T19:55:51.509Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79271 (GCVE-0-2026-79271)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:44
VLAI
EPSS
VEX
Summary
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:10 UTC
CWE
- CWE-200 - Information leak
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79271",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:10:41.344540Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:44:18.058Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information leak",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:18.553Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/501661601"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79271",
"datePublished": "2026-08-25T20:10:18.553Z",
"dateReserved": "2026-08-25T06:12:54.360Z",
"dateUpdated": "2026-08-26T18:44:18.058Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79270 (GCVE-0-2026-79270)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-28 18:59
VLAI
EPSS
VEX
Summary
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 18:58 UTC
CWE
- CWE-908 - Uninitialized resource
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79270",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T18:58:56.749695Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T18:59:13.002Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-908",
"description": "Uninitialized resource",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:25.156Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/513048462"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79270",
"datePublished": "2026-08-25T20:10:25.156Z",
"dateReserved": "2026-08-25T06:12:53.244Z",
"dateUpdated": "2026-08-28T18:59:13.002Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79269 (GCVE-0-2026-79269)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 20:37
VLAI
EPSS
VEX
Summary
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 20:31 UTC
CWE
- CWE-908 - Uninitialized resource
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T20:31:52.289866Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T20:37:06.861Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-908",
"description": "Uninitialized resource",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:40.222Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/520542088"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79269",
"datePublished": "2026-08-25T20:10:40.222Z",
"dateReserved": "2026-08-25T06:12:52.422Z",
"dateUpdated": "2026-08-27T20:37:06.861Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79267 (GCVE-0-2026-79267)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 20:37
VLAI
EPSS
VEX
Summary
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 20:32 UTC
CWE
- CWE-367 - Race condition
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79267",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T20:32:10.247491Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T20:37:07.618Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "Race condition",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:14.366Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/497839983"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79267",
"datePublished": "2026-08-25T20:10:14.366Z",
"dateReserved": "2026-08-25T06:12:51.627Z",
"dateUpdated": "2026-08-27T20:37:07.618Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79266 (GCVE-0-2026-79266)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 03:55
VLAI
EPSS
VEX
Summary
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-416 - Use after free
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79266",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:55:30.926Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use after free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:46.055Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/537145191"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79266",
"datePublished": "2026-08-25T20:10:46.055Z",
"dateReserved": "2026-08-25T06:12:50.367Z",
"dateUpdated": "2026-08-27T03:55:30.926Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79265 (GCVE-0-2026-79265)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:38
VLAI
EPSS
VEX
Summary
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:17 UTC
CWE
- CWE-459 - Incomplete cleanup
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79265",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:17:52.982899Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:38:24.339Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-459",
"description": "Incomplete cleanup",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:41.908Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/523661149"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79265",
"datePublished": "2026-08-25T20:10:41.908Z",
"dateReserved": "2026-08-25T06:12:49.626Z",
"dateUpdated": "2026-08-26T18:38:24.339Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79264 (GCVE-0-2026-79264)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 19:46
VLAI
EPSS
VEX
Summary
Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 19:39 UTC
CWE
- CWE-706 - Incorrect reference resolution
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79264",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T19:39:04.250443Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T19:46:43.526Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-706",
"description": "Incorrect reference resolution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:23.446Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/507483993"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79264",
"datePublished": "2026-08-25T20:10:23.446Z",
"dateReserved": "2026-08-25T06:12:48.805Z",
"dateUpdated": "2026-08-27T19:46:43.526Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79263 (GCVE-0-2026-79263)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 03:56
VLAI
EPSS
VEX
Summary
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low)
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 00:00 UTC
CWE
- CWE-367 - Race condition
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79263",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T03:56:24.823Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "Race condition",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:47.055Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/497256260"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79263",
"datePublished": "2026-08-25T20:10:47.055Z",
"dateReserved": "2026-08-25T06:12:47.656Z",
"dateUpdated": "2026-08-27T03:56:24.823Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79262 (GCVE-0-2026-79262)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 20:37
VLAI
EPSS
VEX
Summary
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 20:32 UTC
CWE
- CWE-863 - Incorrect authorization
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79262",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T20:32:19.647363Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T20:37:08.090Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect authorization",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:13.449Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/497338168"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79262",
"datePublished": "2026-08-25T20:10:13.449Z",
"dateReserved": "2026-08-25T06:12:46.986Z",
"dateUpdated": "2026-08-27T20:37:08.090Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79261 (GCVE-0-2026-79261)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-27 15:30
VLAI
EPSS
VEX
Summary
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 15:29 UTC
CWE
- CWE-863 - Incorrect authorization
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79261",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T15:29:55.158223Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T15:30:13.606Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect authorization",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:50.815Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/514408247"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79261",
"datePublished": "2026-08-25T20:10:50.815Z",
"dateReserved": "2026-08-25T06:12:46.338Z",
"dateUpdated": "2026-08-27T15:30:13.606Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-79260 (GCVE-0-2026-79260)
Vulnerability from nvd – Published: 2026-08-25 20:10 – Updated: 2026-08-26 18:56
VLAI
EPSS
VEX
Summary
Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:54 UTC
CWE
- CWE-20 - Improper input validation
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-79260",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T18:54:00.298682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T18:56:54.911Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "152.0.7977.65",
"status": "affected",
"version": "152.0.7977.65",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper input validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T20:10:59.611Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
},
{
"url": "https://issues.chromium.org/issues/533511967"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-79260",
"datePublished": "2026-08-25T20:10:59.611Z",
"dateReserved": "2026-08-25T06:12:45.134Z",
"dateUpdated": "2026-08-26T18:56:54.911Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82072 (GCVE-0-2026-82072)
Vulnerability from cvelistv5 – Published: 2026-08-27 23:04 – Updated: 2026-08-29 03:55
VLAI
EPSS
VEX
Summary
Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-28 00:00 UTC
CWE
- CWE-125 - Out of bounds read
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-82072",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-28T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-29T03:55:59.351Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "151.0.7922.72",
"status": "affected",
"version": "151.0.7922.72",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out of bounds read",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T23:04:56.296Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
},
{
"url": "https://issues.chromium.org/issues/534416978"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-82072",
"datePublished": "2026-08-27T23:04:56.296Z",
"dateReserved": "2026-08-27T22:53:45.361Z",
"dateUpdated": "2026-08-29T03:55:59.351Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-75062 (GCVE-0-2026-75062)
Vulnerability from cvelistv5 – Published: 2026-08-26 14:50 – Updated: 2026-08-27 16:55
VLAI
EPSS
VEX
Title
Eval Injection in google/langfun via default lf.query protocol
Summary
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 15:37 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/google/langfun | product |
| https://github.com/google/langfun/issues/725 | issue-tracking |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75062",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T15:37:45.461767Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T15:38:02.455Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/google/langfun/issues/725"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "langfun",
"product": "langfun",
"repo": "https://github.com/google/langfun",
"vendor": "Google",
"versions": [
{
"lessThan": "0.1.2",
"status": "affected",
"version": "0.0.1",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Hamza Haroon"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eImproper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027) in the default \u003ccode\u003elf.query\u003c/code\u003e Python protocol in Google \u003ccode\u003elangfun\u003c/code\u003e versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.\u003c/p\u003e"
}
],
"value": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox."
}
],
"impacts": [
{
"capecId": "CAPEC-242",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-242: Code Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-95",
"description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1188",
"description": "CWE-1188: Insecure Default Initialization of Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T16:55:00.832Z",
"orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"shortName": "Google"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/google/langfun"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/google/langfun/issues/725"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Eval Injection in google/langfun via default lf.query protocol",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"assignerShortName": "Google",
"cveId": "CVE-2026-75062",
"datePublished": "2026-08-26T14:50:50.604Z",
"dateReserved": "2026-08-17T15:35:22.670Z",
"dateUpdated": "2026-08-27T16:55:00.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CERTFR-2026-AVI-1081
Vulnerability from certfr_avis - Published: 2026-08-26 - Updated: 2026-08-26
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Chrome versions ant\u00e9rieures \u00e0 152.0.7977.64 sur Linux et Windows ",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
},
{
"description": "Chrome versions ant\u00e9rieures \u00e0 152.0.7977.65 sur Mac",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-79025",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79025"
},
{
"name": "CVE-2026-79046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79046"
},
{
"name": "CVE-2026-79074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79074"
},
{
"name": "CVE-2026-79028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79028"
},
{
"name": "CVE-2026-79009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79009"
},
{
"name": "CVE-2026-79088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79088"
},
{
"name": "CVE-2026-79087",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79087"
},
{
"name": "CVE-2026-79137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79137"
},
{
"name": "CVE-2026-79006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79006"
},
{
"name": "CVE-2026-78908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78908"
},
{
"name": "CVE-2026-79263",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79263"
},
{
"name": "CVE-2026-78950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78950"
},
{
"name": "CVE-2026-79082",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79082"
},
{
"name": "CVE-2026-79143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79143"
},
{
"name": "CVE-2026-79106",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79106"
},
{
"name": "CVE-2026-78914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78914"
},
{
"name": "CVE-2026-79110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79110"
},
{
"name": "CVE-2026-79249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79249"
},
{
"name": "CVE-2026-79207",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79207"
},
{
"name": "CVE-2026-79222",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79222"
},
{
"name": "CVE-2026-79136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79136"
},
{
"name": "CVE-2026-78984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78984"
},
{
"name": "CVE-2026-79005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79005"
},
{
"name": "CVE-2026-79147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79147"
},
{
"name": "CVE-2026-78986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78986"
},
{
"name": "CVE-2026-79123",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79123"
},
{
"name": "CVE-2026-79245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79245"
},
{
"name": "CVE-2026-79034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79034"
},
{
"name": "CVE-2026-78939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78939"
},
{
"name": "CVE-2026-79246",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79246"
},
{
"name": "CVE-2026-78978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78978"
},
{
"name": "CVE-2026-79053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79053"
},
{
"name": "CVE-2026-79133",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79133"
},
{
"name": "CVE-2026-78964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78964"
},
{
"name": "CVE-2026-78909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78909"
},
{
"name": "CVE-2026-79258",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79258"
},
{
"name": "CVE-2026-79125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79125"
},
{
"name": "CVE-2026-79230",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79230"
},
{
"name": "CVE-2026-78936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78936"
},
{
"name": "CVE-2026-78952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78952"
},
{
"name": "CVE-2026-79138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79138"
},
{
"name": "CVE-2026-79265",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79265"
},
{
"name": "CVE-2026-79155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79155"
},
{
"name": "CVE-2026-78891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78891"
},
{
"name": "CVE-2026-79124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79124"
},
{
"name": "CVE-2026-78966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78966"
},
{
"name": "CVE-2026-79174",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79174"
},
{
"name": "CVE-2026-79259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79259"
},
{
"name": "CVE-2026-79047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79047"
},
{
"name": "CVE-2026-78955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78955"
},
{
"name": "CVE-2026-79131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79131"
},
{
"name": "CVE-2026-79196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79196"
},
{
"name": "CVE-2026-79084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79084"
},
{
"name": "CVE-2026-79186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79186"
},
{
"name": "CVE-2026-79077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79077"
},
{
"name": "CVE-2026-79260",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79260"
},
{
"name": "CVE-2026-78897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78897"
},
{
"name": "CVE-2026-79078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79078"
},
{
"name": "CVE-2026-79271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79271"
},
{
"name": "CVE-2026-79054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79054"
},
{
"name": "CVE-2026-79197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79197"
},
{
"name": "CVE-2026-79011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79011"
},
{
"name": "CVE-2026-79116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79116"
},
{
"name": "CVE-2026-79238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79238"
},
{
"name": "CVE-2026-79007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79007"
},
{
"name": "CVE-2026-79223",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79223"
},
{
"name": "CVE-2026-79019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79019"
},
{
"name": "CVE-2026-78979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78979"
},
{
"name": "CVE-2026-79017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79017"
},
{
"name": "CVE-2026-79127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79127"
},
{
"name": "CVE-2026-79221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79221"
},
{
"name": "CVE-2026-79023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79023"
},
{
"name": "CVE-2026-79287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79287"
},
{
"name": "CVE-2026-79059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79059"
},
{
"name": "CVE-2026-78956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78956"
},
{
"name": "CVE-2026-79240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79240"
},
{
"name": "CVE-2026-79215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79215"
},
{
"name": "CVE-2026-79256",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79256"
},
{
"name": "CVE-2026-79085",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79085"
},
{
"name": "CVE-2026-79148",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79148"
},
{
"name": "CVE-2026-79214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79214"
},
{
"name": "CVE-2026-78948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78948"
},
{
"name": "CVE-2026-79014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79014"
},
{
"name": "CVE-2026-79151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79151"
},
{
"name": "CVE-2026-79247",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79247"
},
{
"name": "CVE-2026-78893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78893"
},
{
"name": "CVE-2026-79066",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79066"
},
{
"name": "CVE-2026-78991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78991"
},
{
"name": "CVE-2026-79140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79140"
},
{
"name": "CVE-2026-79051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79051"
},
{
"name": "CVE-2026-79105",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79105"
},
{
"name": "CVE-2026-78913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78913"
},
{
"name": "CVE-2026-79016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79016"
},
{
"name": "CVE-2026-79239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79239"
},
{
"name": "CVE-2026-79001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79001"
},
{
"name": "CVE-2026-78962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78962"
},
{
"name": "CVE-2026-79252",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79252"
},
{
"name": "CVE-2026-79056",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79056"
},
{
"name": "CVE-2026-79248",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79248"
},
{
"name": "CVE-2026-79189",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79189"
},
{
"name": "CVE-2026-78958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78958"
},
{
"name": "CVE-2026-78968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78968"
},
{
"name": "CVE-2026-78900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78900"
},
{
"name": "CVE-2026-78940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78940"
},
{
"name": "CVE-2026-79083",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79083"
},
{
"name": "CVE-2026-79067",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79067"
},
{
"name": "CVE-2026-79267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79267"
},
{
"name": "CVE-2026-79206",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79206"
},
{
"name": "CVE-2026-79210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79210"
},
{
"name": "CVE-2026-78943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78943"
},
{
"name": "CVE-2026-79043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79043"
},
{
"name": "CVE-2026-78898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78898"
},
{
"name": "CVE-2026-79071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79071"
},
{
"name": "CVE-2026-79175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79175"
},
{
"name": "CVE-2026-78980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78980"
},
{
"name": "CVE-2026-79002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79002"
},
{
"name": "CVE-2026-79095",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79095"
},
{
"name": "CVE-2026-78965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78965"
},
{
"name": "CVE-2026-79150",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79150"
},
{
"name": "CVE-2026-78949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78949"
},
{
"name": "CVE-2026-79178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79178"
},
{
"name": "CVE-2026-79018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79018"
},
{
"name": "CVE-2026-78974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78974"
},
{
"name": "CVE-2026-78942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78942"
},
{
"name": "CVE-2026-79217",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79217"
},
{
"name": "CVE-2026-79072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79072"
},
{
"name": "CVE-2026-79202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79202"
},
{
"name": "CVE-2026-79192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79192"
},
{
"name": "CVE-2026-79064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79064"
},
{
"name": "CVE-2026-79257",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79257"
},
{
"name": "CVE-2026-78941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78941"
},
{
"name": "CVE-2026-78906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78906"
},
{
"name": "CVE-2026-79286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79286"
},
{
"name": "CVE-2026-79232",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79232"
},
{
"name": "CVE-2026-79213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79213"
},
{
"name": "CVE-2026-78959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78959"
},
{
"name": "CVE-2026-79176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79176"
},
{
"name": "CVE-2026-79282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79282"
},
{
"name": "CVE-2026-78903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78903"
},
{
"name": "CVE-2026-79049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79049"
},
{
"name": "CVE-2026-79057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79057"
},
{
"name": "CVE-2026-79269",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79269"
},
{
"name": "CVE-2026-78946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78946"
},
{
"name": "CVE-2026-79122",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79122"
},
{
"name": "CVE-2026-78961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78961"
},
{
"name": "CVE-2026-79226",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79226"
},
{
"name": "CVE-2026-79187",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79187"
},
{
"name": "CVE-2026-79209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79209"
},
{
"name": "CVE-2026-79218",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79218"
},
{
"name": "CVE-2026-79177",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79177"
},
{
"name": "CVE-2026-79048",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79048"
},
{
"name": "CVE-2026-79128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79128"
},
{
"name": "CVE-2026-79119",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79119"
},
{
"name": "CVE-2026-78954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78954"
},
{
"name": "CVE-2026-79190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79190"
},
{
"name": "CVE-2026-79013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79013"
},
{
"name": "CVE-2026-79264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79264"
},
{
"name": "CVE-2026-79261",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79261"
},
{
"name": "CVE-2026-79212",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79212"
},
{
"name": "CVE-2026-79188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79188"
},
{
"name": "CVE-2026-79290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79290"
},
{
"name": "CVE-2026-79097",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79097"
},
{
"name": "CVE-2026-79173",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79173"
},
{
"name": "CVE-2026-79098",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79098"
},
{
"name": "CVE-2026-78899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78899"
},
{
"name": "CVE-2026-79237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79237"
},
{
"name": "CVE-2026-78944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78944"
},
{
"name": "CVE-2026-79004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79004"
},
{
"name": "CVE-2026-78904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78904"
},
{
"name": "CVE-2026-79234",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79234"
},
{
"name": "CVE-2026-78983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78983"
},
{
"name": "CVE-2026-78990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78990"
},
{
"name": "CVE-2026-79112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79112"
},
{
"name": "CVE-2026-79275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79275"
},
{
"name": "CVE-2026-79040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79040"
},
{
"name": "CVE-2026-79069",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79069"
},
{
"name": "CVE-2026-79236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79236"
},
{
"name": "CVE-2026-79185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79185"
},
{
"name": "CVE-2026-79262",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79262"
},
{
"name": "CVE-2026-79198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79198"
},
{
"name": "CVE-2026-79030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79030"
},
{
"name": "CVE-2026-79090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79090"
},
{
"name": "CVE-2026-79179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79179"
},
{
"name": "CVE-2026-79055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79055"
},
{
"name": "CVE-2026-79216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79216"
},
{
"name": "CVE-2026-79231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79231"
},
{
"name": "CVE-2026-79033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79033"
},
{
"name": "CVE-2026-78915",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78915"
},
{
"name": "CVE-2026-79024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79024"
},
{
"name": "CVE-2026-79073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79073"
},
{
"name": "CVE-2026-79094",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79094"
},
{
"name": "CVE-2026-79227",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79227"
},
{
"name": "CVE-2026-78969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78969"
},
{
"name": "CVE-2026-79241",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79241"
},
{
"name": "CVE-2026-79191",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79191"
},
{
"name": "CVE-2026-79204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79204"
},
{
"name": "CVE-2026-78947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78947"
},
{
"name": "CVE-2026-79120",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79120"
},
{
"name": "CVE-2026-79146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79146"
},
{
"name": "CVE-2026-79117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79117"
},
{
"name": "CVE-2026-79193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79193"
},
{
"name": "CVE-2026-78911",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78911"
},
{
"name": "CVE-2026-78938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78938"
},
{
"name": "CVE-2026-79139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79139"
},
{
"name": "CVE-2026-79003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79003"
},
{
"name": "CVE-2026-78907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78907"
},
{
"name": "CVE-2026-79026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79026"
},
{
"name": "CVE-2026-79111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79111"
},
{
"name": "CVE-2026-79285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79285"
},
{
"name": "CVE-2026-78985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78985"
},
{
"name": "CVE-2026-79021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79021"
},
{
"name": "CVE-2026-79220",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79220"
},
{
"name": "CVE-2026-78905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78905"
},
{
"name": "CVE-2026-79274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79274"
},
{
"name": "CVE-2026-79195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79195"
},
{
"name": "CVE-2026-79235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79235"
},
{
"name": "CVE-2026-78951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78951"
},
{
"name": "CVE-2026-78892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78892"
},
{
"name": "CVE-2026-79243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79243"
},
{
"name": "CVE-2026-79242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79242"
},
{
"name": "CVE-2026-78987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78987"
},
{
"name": "CVE-2026-79289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79289"
},
{
"name": "CVE-2026-79182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79182"
},
{
"name": "CVE-2026-79093",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79093"
},
{
"name": "CVE-2026-79134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79134"
},
{
"name": "CVE-2026-79181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79181"
},
{
"name": "CVE-2026-79118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79118"
},
{
"name": "CVE-2026-78934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78934"
},
{
"name": "CVE-2026-79228",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79228"
},
{
"name": "CVE-2026-79253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79253"
},
{
"name": "CVE-2026-78976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78976"
},
{
"name": "CVE-2026-79142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79142"
},
{
"name": "CVE-2026-78910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78910"
},
{
"name": "CVE-2026-79022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79022"
},
{
"name": "CVE-2026-79075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79075"
},
{
"name": "CVE-2026-79020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79020"
},
{
"name": "CVE-2026-79107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79107"
},
{
"name": "CVE-2026-79284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79284"
},
{
"name": "CVE-2026-78935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78935"
},
{
"name": "CVE-2026-79250",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79250"
},
{
"name": "CVE-2026-79255",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79255"
},
{
"name": "CVE-2026-79244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79244"
},
{
"name": "CVE-2026-79293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79293"
},
{
"name": "CVE-2026-78895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78895"
},
{
"name": "CVE-2026-79091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79091"
},
{
"name": "CVE-2026-79229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79229"
},
{
"name": "CVE-2026-78963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78963"
},
{
"name": "CVE-2026-79291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79291"
},
{
"name": "CVE-2026-79058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79058"
},
{
"name": "CVE-2026-79031",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79031"
},
{
"name": "CVE-2026-79108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79108"
},
{
"name": "CVE-2026-79027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79027"
},
{
"name": "CVE-2026-79012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79012"
},
{
"name": "CVE-2026-79183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79183"
},
{
"name": "CVE-2026-79045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79045"
},
{
"name": "CVE-2026-79042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79042"
},
{
"name": "CVE-2026-79103",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79103"
},
{
"name": "CVE-2026-78945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78945"
},
{
"name": "CVE-2026-78957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78957"
},
{
"name": "CVE-2026-79224",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79224"
},
{
"name": "CVE-2026-79015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79015"
},
{
"name": "CVE-2026-79205",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79205"
},
{
"name": "CVE-2026-79132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79132"
},
{
"name": "CVE-2026-78975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78975"
},
{
"name": "CVE-2026-79038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79038"
},
{
"name": "CVE-2026-79211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79211"
},
{
"name": "CVE-2026-79201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79201"
},
{
"name": "CVE-2026-79154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79154"
},
{
"name": "CVE-2026-78977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78977"
},
{
"name": "CVE-2026-79076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79076"
},
{
"name": "CVE-2026-79184",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79184"
},
{
"name": "CVE-2026-79126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79126"
},
{
"name": "CVE-2026-78937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78937"
},
{
"name": "CVE-2026-79104",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79104"
},
{
"name": "CVE-2026-78912",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78912"
},
{
"name": "CVE-2026-79200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79200"
},
{
"name": "CVE-2026-79225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79225"
},
{
"name": "CVE-2026-79288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79288"
},
{
"name": "CVE-2026-79099",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79099"
},
{
"name": "CVE-2026-78981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78981"
},
{
"name": "CVE-2026-79060",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79060"
},
{
"name": "CVE-2026-78989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78989"
},
{
"name": "CVE-2026-79041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79041"
},
{
"name": "CVE-2026-79149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79149"
},
{
"name": "CVE-2026-79008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79008"
},
{
"name": "CVE-2026-79233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79233"
},
{
"name": "CVE-2026-79144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79144"
},
{
"name": "CVE-2026-78999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78999"
},
{
"name": "CVE-2026-79270",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79270"
},
{
"name": "CVE-2026-79070",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79070"
},
{
"name": "CVE-2026-79254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79254"
},
{
"name": "CVE-2026-78901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78901"
},
{
"name": "CVE-2026-79180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79180"
},
{
"name": "CVE-2026-79272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79272"
},
{
"name": "CVE-2026-78960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78960"
},
{
"name": "CVE-2026-79050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79050"
},
{
"name": "CVE-2026-79266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79266"
},
{
"name": "CVE-2026-79130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79130"
},
{
"name": "CVE-2026-79039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79039"
},
{
"name": "CVE-2026-79052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79052"
},
{
"name": "CVE-2026-79065",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79065"
},
{
"name": "CVE-2026-79109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79109"
},
{
"name": "CVE-2026-79129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79129"
},
{
"name": "CVE-2026-79032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79032"
},
{
"name": "CVE-2026-79292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79292"
},
{
"name": "CVE-2026-79000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79000"
},
{
"name": "CVE-2026-78953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78953"
},
{
"name": "CVE-2026-79068",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79068"
},
{
"name": "CVE-2026-79203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79203"
},
{
"name": "CVE-2026-78894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78894"
},
{
"name": "CVE-2026-79219",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79219"
},
{
"name": "CVE-2026-78896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78896"
},
{
"name": "CVE-2026-79152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79152"
},
{
"name": "CVE-2026-79199",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79199"
},
{
"name": "CVE-2026-79273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79273"
},
{
"name": "CVE-2026-79194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79194"
},
{
"name": "CVE-2026-79283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79283"
},
{
"name": "CVE-2026-79010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79010"
},
{
"name": "CVE-2026-79044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79044"
},
{
"name": "CVE-2026-79121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79121"
},
{
"name": "CVE-2026-78967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78967"
},
{
"name": "CVE-2026-79141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79141"
},
{
"name": "CVE-2026-79089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79089"
},
{
"name": "CVE-2026-79086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79086"
},
{
"name": "CVE-2026-79208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79208"
},
{
"name": "CVE-2026-79276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79276"
},
{
"name": "CVE-2026-79251",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79251"
}
],
"initial_release_date": "2026-08-26T00:00:00",
"last_revision_date": "2026-08-26T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1081",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": "2026-08-25",
"title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
"url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
}
]
}