CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17828

An inappropriate implementation in Chrome for iOS prior to version 151.0.7922.72 allows a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability has a Medium security severity and requires user interaction to exploit.

CVE-2026-17823

Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17823

Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17822

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17825

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17823

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security issue where insufficient policy enforcement in WebXR allows a remote attacker to bypass the same origin policy via a crafted HTML page. This vulnerability is rated as Medium severity by Chromium. Affected packages include ...

CVE-2026-17824

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security flaw due to insufficient policy enforcement in the ServiceWorker component. A remote attacker can exploit this by using a crafted HTML page to bypass the same origin policy . The vulnerability has a Medium security severit...

CVE-2026-17822

Google Chrome on iOS is affected by a race condition in versions prior to 151.0.7922.72 . This vulnerability allows a remote attacker to perform UI spoofing by delivering a crafted HTML page. The issue is categorized with a Medium security severity, and the attack vector is Network with Low compl...

CVE-2026-17819

An inappropriate implementation in WebAppInstalls within Google Chrome (prior to version 151.0.7922.72) allows a remote attacker to perform UI spoofing by hosting a crafted HTML page. Exploitation details are not provided in the documents.

CVE-2026-17819

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17818

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17820

Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50768

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50769

Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17815

Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17817

An inappropriate implementation in ReportingAndNEL within Google Chrome (prior to version 151.0.7922.72 ) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability has a Medium security severity. While the vulnerability is confirmed as affecting the chromium p...

CVE-2026-17816

Google Chrome on Android versions prior to 151.0.7922.72 is vulnerable to a privilege escalation flaw due to insufficient policy enforcement in the Speech component. A remote attacker who has already compromised the renderer process can exploit this by serving a crafted HTML page. This vulnerabil...

CVE-2026-17816

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17816

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...