Threats Tagged 'cve-2026-78943'

A security update for Chromium version 152.0.7977.64 addresses multiple critical vulnerabilities including use-after-free, buffer overflows, type confusion, race conditions, improper input validation, incorrect authorization, information leaks, and memory corruption across various components such as ANGLE, Aura, Chromecast, Views, V8, GPU, and others. These vulnerabilities could allow attackers to cause memory corruption, unauthorized access, or information disclosure. The update was released by the SUSE Product Security Team on 2026-08-25.

CVE-2026-78891 is a high severity buffer overflow vulnerability in the WebRTC component of Google Chrome prior to version 152.0.7977.65. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. Google has released Chrome version 152.0.7977.65 to address this issue.

An improper input validation vulnerability exists in the Editing component of Google Chrome versions prior to 152.0.7977.65. This flaw allows a remote attacker who has already compromised the renderer process and uses social engineering to bypass the web origin policy via a crafted HTML page. The vulnerability has a low severity rating and a CVSS score of 3.1.

CVE-2026-78943 is a medium-severity vulnerability in Google Chrome prior to version 152.0.7977.65 involving improper input validation in the Editing component. This flaw could allow a remote attacker who has compromised the renderer process and used social engineering to bypass the web origin policy via a crafted HTML page. The vulnerability has a low CVSS score of 3.1 and does not impact integrity or availability. A fix is available in Chrome version 152.0.7977.65.