CVE record · 3 sources
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.004 (p34)
- Exposure class
- Browser, Operating system, Mobile OS
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Chromium: CVE-2026-84325 Improper input validation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
-
Long Term Support Channel Update for ChromeOS
A new LTC version 150.0.7871.256 (Platform Version: 16700.66.0 ), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 533502257 High CVE-2026-85043 Incomplete cleanup in Network…
-
Long Term Support Channel Update for ChromeOS
A new LTS-144 version 144.0.7559.262 (Platform Version: 16503.95.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 497869284 Medium CVE-2026-79010 Operation on a resource…
-
Stable Channel Update for Desktop
The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac and 152.0.7977.75 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…
-
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass…
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. (Chromium security severity…