Threats Tagged 'cve-2026-84357'

This security update for Chromium addresses multiple critical vulnerabilities across versions 152.0.7977.75 and 152.0.7977.82. The fixes cover a range of issues including use-after-free, type confusion, out-of-bounds reads and writes, improper input validation, incorrect authorization, information leaks, race conditions, and buffer overflows in various components such as V8, WebGL, Skia, CacheStorage, DevTools, and others. These vulnerabilities could potentially allow attackers to execute arbitrary code, escalate privileges, or leak sensitive information. The update also disables the EULA dialog to use preferences instead of a hardcoded return. The affected versions are specifically identified and patches are available in these updated Chromium releases.

An input validation vulnerability in the Omnibox component of Google Chrome versions prior to 152.0.7977.75 allows a remote attacker to bypass the web origin policy by leveraging social engineering and crafted network traffic. This vulnerability is classified as high severity by Chromium security. No exploit is currently known to be active in the wild. No patch information is provided in the available data.

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: High)