21179 matches found
CVE-2026-17883
Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50632
Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17883
CVE-2026-17883 : In Headless Chrome, an inappropriate implementation prior to version 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. This vulnerability affects headless browser operation and could enable cross-origin access when rendering or hand...
CVE-2026-17880
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17879
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50629
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50628
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17879
CVE-2026-17879 describes an inappropriate implementation in Chrome’s Autofill prior to version 151.0.7922.72 that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Autofill component and its handling of cross-origin data. The available co...
CVE-2026-17880
Summary: CVE-2026-17880 describes an inappropriate Autofill implementation in Google Chrome prior to 151.0.7922.72, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome (Autofill). Root cause: flawed Autofill handling as stated in the desc...
EUVD-2026-50625
Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17876
Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17876
Google Chrome contains an inappropriate implementation in the Payments component that, in versions prior to 151.0.7922.72, allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Chrome (Payments module); vulnerable versions: prior to 151.0.7922.72. Impact:...
EUVD-2026-50619
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...
EUVD-2026-50620
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17870
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...
CVE-2026-17871
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17871
The CVE-2026-17871 entry concerns Google Chrome Passwords, with an inappropriate implementation that, prior to Chrome 151.0.7922.72, allowed a remote attacker to leak cross-origin data via a crafted HTML page when a user engaged in specific UI gestures. The vulnerability affects Chrome’s Password...
CVE-2026-17870
The CVE covers Google Chrome’s Cast component. In Chrome versions before 151.0.7922.72, there is insufficient validation of untrusted input in the Cast feature, which could allow an attacker on the local network segment to leak cross-origin data through malicious network traffic. Impact is restri...