CVE-2026-17924

CVE-2026-17924: Google Chrome contains a Use-after-free in DNS path affecting Chrome versions prior to 151.0.7922.72. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. The cited description notes a high-impact outcome (s...

CVE-2026-17921

Technical details about CVE-2026-17921 are not publicly available in the provided documents; the entries summarize the vulnerability but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

EUVD-2026-50670

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17921

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17916

Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17916

CVE-2026-17916 affects Google Chrome (Chromium-based) prior to 151.0.7922.72, with insufficient policy enforcement in Settings that allowed a renderer-compromised page to escalate privileges. Affected component is Settings in Chrome; root cause: policy enforcement gaps enabling privilege elevatio...

CVE-2026-17908

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50655

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17906

CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome/Chromium’s Bluetooth handling...

CVE-2026-17893

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50642

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17866

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17865

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17865

CVE-2026-17865 describes an insecure implementation in the Crypto component of Google Chrome on macOS prior to 151.0.7922.72, where a renderer process compromise could enable a sandbox escape via a crafted HTML page. The issue originates in the Chromium Crypto path (upstream bug 520516655). Impac...

CVE-2026-17856

CVE-2026-17856 affects Google Chrome on macOS before version 151.0.7922.72. An inappropriate implementation in the Network component of Chromium allows a remote attacker who has already compromised a renderer process to potentially perform a sandbox escape via a crafted HTML page. Upstream and Re...

CVE-2026-17855

Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17851

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17853

CVE-2026-17853 concerns an inappropriate implementation in Chrome’s DevTools (Chromium) prior to 151.0.7922.72. A remote attacker who has compromised the renderer process can inject scripts or HTML into a privileged page via a crafted HTML page. Affected product/component: Chrome/DevTools in Chro...

EUVD-2026-50602

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17853

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...