CVE-2026-17768

CVE-2026-17768: Insufficient validation of untrusted input in Chrome/Chromium WebSockets (renderer process) could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected product/component: Chromium-based Chrome WebSockets handling; root cause: insufficient input validation...

CVE-2026-17768

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11068

Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2019-13729

Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...