CVE-2026-17815

Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17816

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17813

In Google Chrome on iOS prior to version 151.0.7922.72 , a vulnerability exists due to insufficient policy enforcement . A remote attacker can exploit this by using a crafted HTML page to bypass navigation restrictions . The impact is categorized as Medium severity, with a CVSS score of 6.5 , pri...

CVE-2026-17812

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a UI spoofing attack due to an inappropriate implementation in DigitalCredentials . A remote attacker can trigger this vulnerability by tricking a user into visiting a crafted HTML page . Exploitation details are not provided in the ...

CVE-2026-17811

A use-after-free vulnerability in the ANGLE component of Google Chrome on Windows affects versions prior to 151.0.7922.72 . This flaw allows a remote attacker to potentially perform a sandbox escape by navigating to a crafted HTML page. While the vulnerability is documented in various Linux distr...

EUVD-2026-50763

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17813

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17812

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50761

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17814

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17814

A vulnerability in Google Chrome on iOS (prior to version 151.0.7922.72 ) allows a remote attacker to bypass navigation restrictions. The root cause is insufficient validation of untrusted input , which can be triggered by a crafted HTML page . The security severity is rated as Medium by Chromium...

CVE-2026-17813

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17811

Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17810

Google Chrome versions prior to 151.0.7922.72 are vulnerable to an Uninitialized Use in the Dawn component. This flaw allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. Exploitation details are not provided in the documentation.

CVE-2026-17809

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a sandbox escape due to insufficient validation of untrusted input within the Extensions component. A remote attacker who has already compromised the renderer process can exploit this flaw using a crafted HTML page. The vulnerability...

CVE-2026-17808

An uninitialized use in WebGL within Google Chrome on Android (prior to version 151.0.7922.72 ) allows a remote attacker to leak cross-origin data through a crafted HTML page. This vulnerability is classified as Medium severity. No specific exploit details or direct mitigation steps are provided ...

CVE-2026-17809

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17810

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17809

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17810

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...