25603 matches found
CVE-2026-17768
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50715
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50716
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17768
In versions of Google Chrome prior to 151.0.7922.72 , a vulnerability exists due to insufficient validation of untrusted input in WebSockets . A remote attacker who has already compromised the renderer process could exploit this by using a crafted HTML page to potentially achieve a sandbox escape...
CVE-2026-17766
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17766
The Google Chrome browser on Android versions prior to 151.0.7922.72 is vulnerable to a medium-severity issue where insufficient validation of untrusted input in the Clipboard component allows a local attacker to leak cross-origin data via a crafted HTML page. The vulnerability affects the chromi...
CVE-2026-17767
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17763
Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17762
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17762
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
An inappropriate implementation in FedCM within Google Chrome prior to version 151.0.7922.72 allows a remote attacker to bypass the same-origin policy via a crafted HTML page. This vulnerability is assigned a Medium severity by Chromium security. Exploitation details are not provided in the docum...
CVE-2026-17762
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17760
Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17759
Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17759
Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17760
Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17759
Google Chrome versions prior to 151.0.7922.72 are vulnerable to an Uninitialized Use in codecs . A remote attacker can exploit this by serving a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability impacts the chromium package. Exploitation details ...
CVE-2026-17760
A side-channel information leakage vulnerability exists in NoStatePrefetch within Google Chrome versions prior to 151.0.7922.72 . A remote attacker could exploit this by using a crafted HTML page to leak cross-origin data . This issue has been addressed in recent updates, including those provided...