6688 matches found
CVE-2026-17742
Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17720
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-17703
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...
EUVD-2026-50942
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2026-18016
CVE-2026-18016 : In Chrome for iOS, before version 151.0.7922.72, insufficient policy enforcement in Google Chrome on iOS allows a remote attacker to perform UI spoofing via a crafted HTML page. The issue affects Chrome for iOS (Chromium-based) and is described with a Chromium security severity o...
CVE-2026-18004
CVE-2026-18004 affects Google Chrome’s Speech component. The issue stems from insufficient policy enforcement, allowing a remote attacker who already compromised the renderer process to leak cross-origin data via a crafted HTML page. Impact is cross-origin data leakage with Chromium-listed severi...
CVE-2026-18004
Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-18000
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17985
CVE-2026-17985 affects Google Chrome’s Speech component, where insufficient policy enforcement could allow a remote attacker to bypass site isolation via a crafted HTML page. Affected version range is Chrome prior to 151.0.7922.72 (Chromium security severity: Low). The connected records confirm t...
CVE-2026-17986
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50912
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50902
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. Chromium security severity: Low...
CVE-2026-17974
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17960
CVE-2026-17960 : In Chrome for iOS, prior to 151.0.7922.72, there is insufficient policy enforcement that allows a remote attacker to bypass the no-referrer policy via a crafted HTML page. The vulnerability is labeled with Chromium severity: Low. Exploitation details are not provided in the suppl...
CVE-2026-17960
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17953
CVE-2026-17953 – Normal mode Affected product: Google Chrome on Android WebView. Issue: Insufficient policy enforcement in WebView allowed a remote attacker to bypass navigation restrictions using a crafted HTML page. Root cause: policy enforcement gaps in WebView’s navigation controls (per descr...
CVE-2026-17953
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17927
The CVE-2026-17927 entry concerns Google Chrome DevTools with insufficient policy enforcement prior to version 151.0.7922.72. Affected component: DevTools in Chrome. Root cause and impact: an attacker, by convincing a user to install a malicious extension, could leak cross-origin data via the ext...
EUVD-2026-50853
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...