CVE-2026-17728

Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17732

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17724

CVE-2026-17724 describes a race condition in Chrome for iOS (on iOS) prior to 151.0.7922.72 that allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected software: Google Chrome on iOS (Chromium-based). Root cause: race condition. Impact: UXSS leading ...

CVE-2026-17723

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50850

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

CVE-2026-17720

Vulnerability CVE-2026-17720 affects Google Chrome prior to 151.0.7922.72, where insufficient policy enforcement in Passwords allowed a renderer‑process‑compromised attacker to leak cross‑origin data via a crafted HTML page. Affected product: Google Chrome (versions earlier than 151.0.7922.72). I...

CVE-2026-17718

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17714

The CVE-2026-17714 affects ANGLE in Google Chrome and is caused by an uninitialized use in ANGLE code. A remote attacker could potentially obtain sensitive information from a process’s memory via a crafted HTML page, with the issue present in Chrome versions before 151.0.7922.72. The vulnerabilit...

CVE-2026-17714

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50837

Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50834

Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17705

CVE-2026-17705 describes an integer overflow in libxml used by Google Chrome before 151.0.7922.72, enabling a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is categorized with Chromium/Chrome severity as High. Affected product/component: Goo...

CVE-2026-17706

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50830

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17700

CVE-2026-17700 affects Google Chrome prior to 151.0.7922.72. The issue is insufficient validation of untrusted input in the Actor component, which could allow a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The description does not pro...

CVE-2026-17693

Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50821

Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17690

CVE-2026-17690 affects Google Chrome on Android . The issue is "insufficient validation of untrusted input" in the PDF component, allowing a local attacker to leak cross-origin data through a crafted HTML page. The vulnerability is tied to Chrome/Chromium versions prior to 151.0.7922.72 . Impact ...

CVE-2026-17691

Affected product: Google Chrome on Windows. The issue is an out-of-bounds write in ANGLE that could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability exists in Chrome versions prior to 151.0.7922.72. Impact is a sandbox escape; mitigation is to u...

CVE-2026-17686

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...