EUVD-2026-50765

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17816

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17813

Chrome for iOS is affected by CVE-2026-17813 due to insufficient policy enforcement that allows a remote attacker to bypass navigation restrictions with a crafted HTML page. The issue impacts Google Chrome on iOS prior to version 151.0.7922.72. Root cause: insufficient policy enforcement in the b...

CVE-2026-17813

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17805

Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17805

The CVE-2026-17805 entry concerns Google Chrome on Android, where insufficient policy enforcement in Glic allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chrome for Android; vulnerable component/root cause: policy enforcement in Glic. Impact:...

EUVD-2026-50754

Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50706

Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17743

CVE-2026-17743 affects Google Chrome: Insufficient policy enforcement in the ControlledFrame could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue is reported for versions prior to 151.0.7922.72 ; remediation is to update to 151.0.7922.72 or later. Docu...

EUVD-2026-50692

Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17739

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17739

Google Chrome Extensions could bypass policy enforcement, enabling UXSS via a crafted extension. Affected: the Extensions component in Chrome before 151.0.7922.72. Root cause: insufficient policy enforcement in Extensions. Impact: an attacker convincing a user to install a malicious extension cou...

EUVD-2026-50689

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17720

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50846

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17703

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-17703

Chrome for iOS (Google Chrome on iOS) is affected by CVE-2026-17703 due to insufficient policy enforcement, allowing a remote attacker to bypass navigation restrictions through a crafted HTML page. The issue affects versions prior to 151.0.7922.72. The connected documents do not provide details o...

CVE-2026-17693

CVE-2026-17693 affects Google Chrome due to insufficient policy enforcement in FileSystem. Prior to version 151.0.7922.72, a remote attacker could leak cross-origin data via a crafted HTML page, as described in the connected records. The root cause is policy enforcement within FileSystem; the fix...

CVE-2026-17662

CVE-2026-17662 affects Google Chrome's Prefetch component. Insufficient policy enforcement allowed a remote attacker to leak cross-origin data via a crafted HTML page on Chrome versions before 151.0.7922.72. Root cause: inadequate Prefetch policy restrictions enabling cross-origin data exposure. ...

PT-2026-66218

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Low...