Threats Tagged 'cve-2026-84327'

This security update for Chromium addresses multiple critical vulnerabilities across versions 152.0.7977.75 and 152.0.7977.82. The fixes cover a range of issues including use-after-free, type confusion, out-of-bounds reads and writes, improper input validation, incorrect authorization, information leaks, race conditions, and buffer overflows in various components such as V8, WebGL, Skia, CacheStorage, DevTools, and others. These vulnerabilities could potentially allow attackers to execute arbitrary code, escalate privileges, or leak sensitive information. The update also disables the EULA dialog to use preferences instead of a hardcoded return. The affected versions are specifically identified and patches are available in these updated Chromium releases.

CVE-2026-84327 is a vulnerability in Google Chrome on Android affecting versions prior to 152.0.7977.75. It involves incorrect authorization in the Autofill feature, which could allow a remote attacker using social engineering techniques to obtain sensitive information via a crafted HTML page. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. No known exploits are reported in the wild. The issue is classified under CWE-863 (Incorrect Authorization).

Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)