1023 matches found
CVE-2026-17917
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17911
Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50656
Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17905
Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17891
Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17885
Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17886
CVE-2026-17886 : Use-after-free in Google Chrome (Enterprise builds) prior to 151.0.7922.72 can enable a remote attacker to potentially cause heap corruption via a crafted HTML page. Public sources reference Chrome stability updates addressing multiple related subsystems (Dawn, Compositing, Views...
EUVD-2026-50628
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17874
CVE-2026-17874 affects Google Chrome on iOS (Chrome for iOS). The vulnerability stems from an inappropriate implementation in Chrome for iOS prior to version 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. Impact is UI spoofing; exploitation details are n...
CVE-2026-17865
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50603
Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17852
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50591
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17839
In CVE-2026-17839, an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability affects Chrome for iOS on iPhone/iPad and is classified with a Medium severity (C...
EUVD-2026-50772
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17822
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50759
Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50754
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17801
CVE-2026-17801 is an out-of-bounds read/write flaw in ANGLE used by Google Chrome/Chromium prior to version 151.0.7922.72. It enables a remote attacker to potentially escape the sandbox via a crafted HTML page. Impact is described as high (I/H) and critical under CVSS 3.1 (9.6). The affected comp...