Vulnerabilities

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML…

Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

chrome, chromium

Exposure class

Browser

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-78975 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   Advisory MSRC 28 Aug 2026

   Chromium: CVE-2026-78975 Incorrect authorization in DOM

   Fix available CVE-2026-78975 Microsoft Google
2. 11
   CVE NVD 25 Aug 2026

   Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain…

   CVE-2026-79104 Google
3. 17
   CVE NVD 25 Aug 2026

   Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted…

   CVE-2026-79099 Google
4. 11
   CVE NVD 25 Aug 2026

   Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

   CVE-2026-79095 Google
5. 11
   CVE NVD 25 Aug 2026

   Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML…

   CVE-2026-79094 Google
6. 11
   CVE NVD 25 Aug 2026

   Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a…

   CVE-2026-79093 Google
7. 17
   CVE NVD 25 Aug 2026

   Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a…

   CVE-2026-79087 Google
8. 17
   CVE NVD 25 Aug 2026

   Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass…

   CVE-2026-79085 Google
9. 11
   CVE NVD 25 Aug 2026

   Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive…

   CVE-2026-79075 Google
10. 11
    CVE NVD 25 Aug 2026

    Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain…

    CVE-2026-79074 Google
11. 11
    CVE NVD 25 Aug 2026

    Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially…

    CVE-2026-79071 Google
12. 17
    CVE NVD 25 Aug 2026

    Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass…

    CVE-2026-79067 Google
13. 11
    CVE NVD 25 Aug 2026

    Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain…

    CVE-2026-79059 Google
14. 11
    CVE NVD 25 Aug 2026

    Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the…

    CVE-2026-79056 Google
15. 17
    CVE NVD 25 Aug 2026

    Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute…

    CVE-2026-79054 Google
16. 17
    CVE NVD 25 Aug 2026

    Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the…

    CVE-2026-79045 Google
17. 17
    CVE NVD 25 Aug 2026

    Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the…

    CVE-2026-79043 Google
18. 17
    CVE NVD 25 Aug 2026

    Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak…

    CVE-2026-79034 Google
19. 17
    CVE NVD 25 Aug 2026

    Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted…

    CVE-2026-79027 Google
20. 17
    CVE NVD 25 Aug 2026

    Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute…

    CVE-2026-79026 Google