25603 matches found
CVE-2026-17989
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17991
A vulnerability in Google Chrome (prior to version 151.0.7922.72 ) involving the AI component allows for a potential sandbox escape . The root cause is insufficient validation of untrusted input , which a remote attacker could exploit by first compromising the renderer process and then using a cr...
EUVD-2026-50917
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17989
A Type Confusion vulnerability exists in the V8 engine of Google Chrome prior to version 151.0.7922.72 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by delivering a crafted HTML page. The vulnerability is associated with CWE-843 . Remediation involves upgrading t...
CVE-2026-17988
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17988
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17988
In Google Chrome versions prior to 151.0.7922.72 , insufficient validation of untrusted input within the Navigation component allows a remote attacker who has compromised the renderer process to bypass navigation restrictions. This can be achieved by using a crafted HTML page . While the technica...
CVE-2026-17985
Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security flaw in the Speech component due to insufficient policy enforcement . This issue allows a remote attacker to bypass site isolation by navigating to a crafted HTML page . The Chromium security severity for this vulnerabilit...
CVE-2026-17986
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50912
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17984
An inappropriate implementation in the Browser component of Google Chrome on Android prior to version 151.0.7922.72 allows a local attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a Low security severity. While the impact is limited to data leakage, the exploitati...
CVE-2026-17984
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17983
Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50909
Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17983
Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17984
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17984
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17983
Google Chrome versions prior to 151.0.7922.72 are vulnerable to UI spoofing due to an inappropriate implementation in Global Media Controls . A remote attacker can trigger this by directing a user to a crafted HTML page . Exploitation details or specific exploit links are not provided in the docu...