EUVD-2026-50616

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50617

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17865

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50614

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17858

Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17859

Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17856

Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17855

Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17855

A race in Chrome DevTools on macOS before 151.0.7922.72 allows a remote attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome DevTools; root cause: race condition. No remediation details provided in the documents.

EUVD-2026-50605

Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17857

In Google Chrome, the vulnerability CVE-2026-17857 stems from an inappropriate implementation in the Network component. It affects Chrome builds prior to version 151.0.7922.72 , enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue is mitigated by upgrading to ve...

CVE-2026-17857

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17853

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50601

Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17850

Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17850

CVE-2026-17850 affects Google Chrome prior to version 151.0.7922.72. The issue is an inappropriate implementation in Permissions that allows a remote attacker to bypass the same-origin policy via a crafted HTML page, as described by the vendor. The Chromium entry marks the severity as Medium. A f...

CVE-2026-17846

The CVE-2026-17846 entry concerns Google Chrome on Windows with an insecure implementation in the Media component. A remote attacker who compromises the renderer could bypass the same-origin policy via a crafted HTML page. Affected product/version: Chrome prior to 151.0.7922.72. Root cause: inapp...

CVE-2026-17845

CVE-2026-17845 : In Google Chrome, an inappropriate implementation in CSS prior to 151.0.7922.72 can allow a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected software is Chrome; the root cause is CSS handling implementation. Impact is remote code execut...

CVE-2026-17847

CVE-2026-17847 concerns insufficient validation of untrusted input in ANGLE used by Google Chrome, allowing a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected is Chrome with ANGLE before version 151.0.7922.72. The vulnerability is mitigated by updating to ...

EUVD-2026-50595

Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...