CVE-2026-17659

Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-17659

Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-17657

Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17657

Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17653

Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-17653

A Use after free vulnerability in the Skia library within Google Chrome (and other Chromium-based browsers like Microsoft Edge) prior to version 151.0.7922.72 allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page....

CVE-2026-17652

A use after free vulnerability exists in Views within Google Chrome (prior to version 151.0.7922.72 ). This flaw allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by leveraging a crafted HTML page. The vulnerability is rated as Criti...

PT-2026-66020

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in ANGLE, a graphics abstraction layer, allows a remote attacker who has compromised the renderer process to potentially perform a...

PT-2026-66276

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Speech component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-66065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in the GPU component on Mac. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by inducing the...

PT-2026-66064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out-of-bounds read in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. An out-of-bounds re...

PT-2026-66084

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in WebProtect allows a remote attacker who has compromised the renderer process to leak cross-origin data through the use of a crafted HTML page...

PT-2026-66054

Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66000

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Web Authentication allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via...

PT-2026-66082

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the GPU component allows a remote attacker who has already compromised the renderer process to leak cross-origin data. This is achieved by using a...

PT-2026-66307

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-65994

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out-of-bounds write in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ANGLE Almost Native...

PT-2026-66259

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Picture-in-Picture feature allows a remote attacker who has compromised the renderer process to potentially perform a sandbo...

PT-2026-66316

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Passwords component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...