Skip to content

CVE record · 2 sources

CVE-2026-78895

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page.

Vendor: Google
Product: chrome, chromium
Exposure class: Browser

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

Advisory MSRC 28 Aug 2026

Chromium: CVE-2026-78895 Information leak in Paint

Information published.

Fix available CVE-2026-78895 Microsoft Google
11

CVE NVD 25 Aug 2026

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page.

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78895 Google