CVE-2026-17942

Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50869

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17943

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a Content Security Policy (CSP) bypass. The root cause is an inappropriate implementation within the Parser component, which allows a remote attacker to bypass security policies by navigating to a crafted HTML page. The Chromium secu...

CVE-2026-17942

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a side-channel information leakage within SVG . A remote attacker can leverage a crafted HTML page to leak cross-origin data . The vulnerability is rated as Low severity by Chromium security. No specific exploit details or manual wor...

EUVD-2026-50866

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17941

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17941

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17940

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17941

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17940

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50867

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17940

The Google Chrome browser on Android versions prior to 151.0.7922.72 is vulnerable to a sandbox escape due to insufficient validation of untrusted input within the Picture-in-Picture functionality. A remote attacker who has already compromised the renderer process can exploit this flaw by using a...

CVE-2026-17941

An inappropriate implementation in Google Chrome on iOS prior to version 151.0.7922.72 allows a remote attacker to spoof the contents of the Omnibox (URL bar) by visiting a crafted HTML page. While the Chromium security severity is rated as Low , the CVSS 3.1 score is 4.3 (Medium) , reflecting a ...

EUVD-2026-50863

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50864

Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17938

Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17938

An inappropriate implementation in FullScreen within Google Chrome on Android (prior to version 151.0.7922.72 ) allows a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability is categorized as Low severity by the Chromium security team. No specific exploit links or re...