10152 matches found
CVE-2026-17827
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17823
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17823
Google Chrome WebXR contains a vulnerability where insufficient policy enforcement prior to version 151.0.7922.72 could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue affects Chrome WebXR and is mitigated by updating to version 151.0.7922.72 or newer; ...
CVE-2026-17824
This CVE affects Google Chrome’s ServiceWorker handling. The issue is described as insufficient policy enforcement in ServiceWorker, enabling a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is associated with Chrome versions prior to 151.0.7922.72, wi...
EUVD-2026-50769
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17818
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17817
Affected software: Google Chrome (Chromium-based). The issue is an inappropriate implementation in ReportingAndNEL that allows a remote attacker to leak cross-origin data through a crafted HTML page. Root cause/impact: as stated, cross-origin data leakage; no further exploitation details are prov...
CVE-2026-17813
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17812
CVE-2026-17812 affects Google Chrome (before 151.0.7922.72) due to an inappropriate implementation in the DigitalCredentials component, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is rooted in how DigitalCredentials is implemented, per NVD/CVE sour...
CVE-2026-17810
Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17798
CVE-2026-17798 affects Google Chrome’s Cast component; an inappropriate implementation in Chrome prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Affects Chrome versions before 151.0.7922.72. Impact: cross-origin data leakage; no exploitation deta...
CVE-2026-17795
CVE-2026-17795 concerns an insecure GetUserMedia implementation in Google Chrome (Chromium-based) prior to 151.0.7922.72. An attacker who already compromised the renderer could leak cross-origin data via a crafted HTML page. The root cause is an inappropriate implementation in GetUserMedia. Affec...
CVE-2026-17788
The CVE-2026-17788 entry concerns the Blink component in Google Chrome. The vulnerability arises from an inappropriate implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected are Chrome versions prior to 151.0.7922.72 (Chromium-based). The availab...
CVE-2026-17785
In Google Chrome, the ANGLE component suffers an uninitialized-use vulnerability that in versions prior to 151.0.7922.72 could allow a remote attacker to leak cross-origin data via a crafted HTML page (Chromium severity: Medium). Affected software/version: Chrome up to 151.0.7922.72. Root cause: ...
EUVD-2026-50729
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50731
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17783
Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50728
Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...