Threats Tagged 'cve-2026-84356'

This security update for Chromium addresses multiple critical vulnerabilities across versions 152.0.7977.75 and 152.0.7977.82. The fixes cover a range of issues including use-after-free, type confusion, out-of-bounds reads and writes, improper input validation, incorrect authorization, information leaks, race conditions, and buffer overflows in various components such as V8, WebGL, Skia, CacheStorage, DevTools, and others. These vulnerabilities could potentially allow attackers to execute arbitrary code, escalate privileges, or leak sensitive information. The update also disables the EULA dialog to use preferences instead of a hardcoded return. The affected versions are specifically identified and patches are available in these updated Chromium releases.

A UI misrepresentation vulnerability in the FullScreen mode of Google Chrome prior to version 152.0.7977.75 allows a remote attacker to spoof the address bar by using a crafted HTML page. This issue is classified under CWE-451 and has a low severity rating according to Chromium's security assessment. No known exploits are reported in the wild. No explicit patch information is provided, but the vulnerability affects versions before 152.0.7977.75.

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)