CVE-2026-17989

A Type Confusion vulnerability exists in the V8 engine of Google Chrome prior to version 151.0.7922.72 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by delivering a crafted HTML page. The vulnerability is associated with CWE-843 . Remediation involves upgrading t...

CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50917

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17991

A vulnerability in Google Chrome (prior to version 151.0.7922.72 ) involving the AI component allows for a potential sandbox escape . The root cause is insufficient validation of untrusted input , which a remote attacker could exploit by first compromising the renderer process and then using a cr...

CVE-2026-17988

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17988

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17988

In Google Chrome versions prior to 151.0.7922.72 , insufficient validation of untrusted input within the Navigation component allows a remote attacker who has compromised the renderer process to bypass navigation restrictions. This can be achieved by using a crafted HTML page . While the technica...

CVE-2026-17986

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50912

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17985

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security flaw in the Speech component due to insufficient policy enforcement . This issue allows a remote attacker to bypass site isolation by navigating to a crafted HTML page . The Chromium security severity for this vulnerabilit...

CVE-2026-17984

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17983

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50909

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17983

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17984

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17983

Google Chrome versions prior to 151.0.7922.72 are vulnerable to UI spoofing due to an inappropriate implementation in Global Media Controls . A remote attacker can trigger this by directing a user to a crafted HTML page . Exploitation details or specific exploit links are not provided in the docu...

CVE-2026-17984

An inappropriate implementation in the Browser component of Google Chrome on Android prior to version 151.0.7922.72 allows a local attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a Low security severity. While the impact is limited to data leakage, the exploitati...

CVE-2026-17984

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17981

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50908

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...