12 matches found
SUSE CVE-2026-17924
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17771
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-17768
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-18001
Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50909
Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50658
Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...
CVE-2026-17892
Affected product: Google Chrome WebXR implementation. Vulnerable component/file: WebXR in Chrome. Root cause: Inappropriate WebXR implementation allowing a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. Affected versions: prior to 151.0.7922...
CVE-2026-17883
The CVE-2026-17883 entry concerns an inappropriate implementation in Chrome's Headless mode that allows a remote attacker to bypass the Same-Origin Policy via a crafted HTML page. The issue affects Headless in Google Chrome prior to version 151.0.7922.72, with the root cause described as an imple...
CVE-2026-17769
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17714
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-17714
CVE-2026-17714 affects the ANGLE component in Google Chrome. An uninitialized use flaw allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. Upstream details reference Chromium issue 521293438; Red Hat/Debian notes confirm the ANGLE root c...
