CVE-2026-17911

Google Chrome SVG policy enforcement flaw (CVE-2026-17911) allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome; vulnerable component: SVG handling in Chrome before version 151.0.7922.72. Root cause details are not provided in the documents. ...

CVE-2026-17911

Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17907

CVE-2026-17907 concerns Google Chrome prior to 151.0.7922.72, where a side-channel vulnerability could leak cross-origin data via a crafted HTML page. The issue affects the network component of Chrome/Chromium and is labeled with low severity. The connected sources indicate a patch/update timelin...

CVE-2026-17905

The CVE affects Google Chrome’s SurfaceCapture component, with an inappropriate implementation allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions are Chrome prior to 151.0.7922.72. Impact is cross-origin data leakage; no exploitation details are provid...

CVE-2026-17906

Affected software: Google Chrome. Vulnerability: insufficient validation of untrusted input in Bluetooth, enabling a potential sandbox escape if the renderer process is compromised by a crafted HTML page. Root cause: input validation flaw in Bluetooth handling prior to version 151.0.7922.72. Impa...

CVE-2026-17906

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

A vulnerability in Google Chrome on Android involves insufficient policy enforcement for NFC. It affects Chrome versions before 151.0.7922.72 and could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact is limited to cross-origin data disclosure as described; no exp...

CVE-2026-17895

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50645

Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17897

Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17893

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17890

Affected software: Google Chrome (DevTools in Chromium). Vulnerable component: DevTools with insufficient validation of untrusted input. Root cause: input validation flaw in DevTools that could be triggered from a compromised renderer process. Impact: potential sandbox escape via a crafted HTML p...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50632

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17880

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17871

The CVE-2026-17871 entry concerns Google Chrome Passwords, with an inappropriate implementation that, prior to Chrome 151.0.7922.72, allowed a remote attacker to leak cross-origin data via a crafted HTML page when a user engaged in specific UI gestures. The vulnerability affects Chrome’s Password...

EUVD-2026-50617

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17868

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17866

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17869

Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...