CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17680

Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17675

Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17666

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...

CVE-2026-17658

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-18008

This CVE affects Google Chrome Settings with an inappropriate implementation vulnerability that enables UI spoofing via malicious network traffic in versions prior to 151.0.7922.72. Root cause: an incorrect Settings implementation. Impact is remote UI spoofing; remediation is to update to 151.0.7...

CVE-2026-17996

Google Chrome on macOS contains a vulnerability (CVE-2026-17996) where an inappropriate implementation in the browser allows a local attacker to bypass navigation restrictions via a malicious file. Affected version range includes all builds prior to 151.0.7922.72. The issue is classified with Chr...

CVE-2026-17971

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17958

CVE-2026-17958 concerns Google Chrome where an insecure implementation in Chrome’s Views could allow a remote attacker to perform UI spoofing via a crafted HTML page. Affected product/version: Chrome prior to 151.0.7922.72. The Chromium-based issue has been assigned a low severity. The available ...

CVE-2026-17958

Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17950

CVE-2026-17950 concerns Google Chrome on macOS where an inappropriate Safebrowsing implementation could allow a remote attacker to execute arbitrary code via a malicious file. The vulnerability is described as affecting Chrome on Mac prior to version 151.0.7922.72. Affected component: Safebrowsin...

EUVD-2026-50875

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50858

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17912

CVE-2026-17912 : In Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72, an inappropriate implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The Chromium entry lists this as a Low severity issue. Affected product: Chrome for iOS; ro...

CVE-2026-17886

CVE-2026-17886 concerns Google Chrome (Enterprise) with a use-after-free in the browser prior to 151.0.7922.72, potentially enabling a remote attacker to trigger heap corruption via a crafted HTML page. The connected NVD listing repeats this description and lists a Medium severity. No exploitatio...

EUVD-2026-50635

Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17876

Google Chrome contains an inappropriate implementation in the Payments component that, in versions prior to 151.0.7922.72, allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Chrome (Payments module); vulnerable versions: prior to 151.0.7922.72. Impact:...

CVE-2026-17875

This CVE (CVE-2026-17875) concerns a use-after-free in PDFium used by Google Chrome before version 151.0.7922.72 . The vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted PDF file. Affected component: PDFium within Chrome; root cause: use-afte...

CVE-2026-17861

The CVE describes a vulnerability in Google Chrome’s Updater where insufficient validation of untrusted input could allow a local attacker to escalate privileges via a malicious file. Affected product: Google Chrome (Updater component). Root cause: improper input validation in Updater. Impact: OS...