CVE-2026-78940
Description
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Is your site exposed to CVE-2026-78940?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2026-78940? +
How do I check if I'm vulnerable to CVE-2026-78940? +
Related Vulnerabilities
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending …
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version …
Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information …
The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via …
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following …