CVE-2026-18000

An insufficient policy enforcement flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521623907...

CVE-2026-17986

An insufficient policy enforcement flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981896...

CVE-2026-17985

An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981430...

CVE-2026-17756

An insufficient policy enforcement flaw was found in the Presentation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501980797...

CVE-2026-17739

An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498353463...

CVE-2026-17815

An insufficient policy enforcement flaw was found in the GuestView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517427352...

CVE-2026-17743

An insufficient policy enforcement flaw was found in the ControlledFrame component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499204022...

CVE-2026-17916

An insufficient policy enforcement flaw was found in the Settings component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=510808598...

CVE-2026-17903

An insufficient policy enforcement flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497277880...

CVE-2026-17927

An insufficient policy enforcement flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513754837...

CVE-2026-17820

An insufficient policy enforcement flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517493101...

CVE-2026-17854

An insufficient policy enforcement flaw was found in the WebMCP component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519500882...

CVE-2026-18016

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18000

Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17903

Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

CVE-2026-17813

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17693

Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-66229

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14155

An insufficient policy enforcement flaw was found in the StorageAccessAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518246925...

python: Python Tarfile: Unexpected file ownership when extracting hardlinks

A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...