4 matches found
CVE-2026-17768
CVE-2026-17768 involves insufficient validation of untrusted input in WebSockets within Google Chrome before version 151.0.7922.72 . A remote attacker who already compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page . The vulnerability is triggered b...
CVE-2026-17768
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11068
Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...