4 matches found
CVE-2026-17768
In versions of Google Chrome prior to 151.0.7922.72 , a vulnerability exists due to insufficient validation of untrusted input in WebSockets . A remote attacker who has already compromised the renderer process could exploit this by using a crafted HTML page to potentially achieve a sandbox escape...
CVE-2026-17768
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11068
Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
