3910 matches found
CVE-2026-18012
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...
CVE-2026-17995
Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17981
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17928
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17933
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17674
Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-17662
Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-17657
Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-18010
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...
EUVD-2026-50931
Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17989
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17988
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17986
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17973
CVE-2026-17973 affects Google Chrome on macOS, where an inappropriate implementation in Views prior to version 151.0.7922.72 could allow a local attacker to read potentially sensitive data from process memory via a crafted HTML page. The vulnerability is described with Chromium security severity:...
CVE-2026-17952
The CVE affects Google Chrome’s V8 engine; an inappropriate implementation allowed arbitrary code execution inside the sandbox via a crafted Chrome Extension, prior to version 151.0.7922.72. Affected component: V8 in Chrome. Root cause: inappropriate implementation. Impact: attacker could run arb...
CVE-2026-17942
The CVE concerns Google Chrome where SVG rendering has a side-channel leakage that allows a remote attacker to exfiltrate cross-origin data via a crafted HTML page. Affected: Chrome versions before 151.0.7922.72. Impact is information disclosure; no exploit details are provided beyond that. Mitig...
CVE-2026-17932
CVE-2026-17932 describes a use-after-free in Chrome’s DataTransfer on Windows, affecting Windows builds prior to 151.0.7922.72. An attacker could potentially read sensitive process-memory data via a crafted HTML page (impact: information disclosure). The issue has been addressed in the Chromium/C...
EUVD-2026-50859
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17924
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17911
Google Chrome SVG policy enforcement flaw (CVE-2026-17911) allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome; vulnerable component: SVG handling in Chrome before version 151.0.7922.72. Root cause details are not provided in the documents. ...