314789 matches found
CVE-2026-17933
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17932
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17933
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17932
CVE-2026-17932 describes a use-after-free in DataTransfer for Google Chrome on Windows prior to 151.0.7922.72. The underlying issue is an object lifetime mismanagement in DataTransfer, enabling a local attacker to read potentially sensitive process memory via a crafted HTML page. The vulnerabilit...
CVE-2026-17932
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17933
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17933
CVE-2026-17933 affects Google Chrome prior to 151.0.7922.72 due to an Inappropriate implementation in DOMStorage, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue has a CVSS v3.1 base score of 4.3 (Medium); impact on confidentiality only. Remediation: upgrad...
EUVD-2026-50859
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17932
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50854
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17927
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17927
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17928
Summary: CVE-2026-17928 concerns an inappropriate implementation in the DataTransfer component of Google Chrome, allowing a remote attacker to leak cross-origin data through a crafted HTML page. The issue is rooted in Chromium’s DataTransfer handling (upstream reference: chromium issue 513762372)...
CVE-2026-17928
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50853
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17928
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17927
CVE-2026-17927: Google Chrome (DevTools) before 151.0.7922.72 has insufficient policy enforcement, enabling a user-assisted leak of cross-origin data via a crafted Chrome Extension. Impact is described as Low severity; exploit requires user interaction and a malicious extension installed by the u...
CVE-2026-17928
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...