79901 matches found
CVE-2026-17864
Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2026-17863
CVE-2026-17863 describes an insecure implementation in Google Chrome on Windows, before version 151.0.7922.72, enabling a local attacker to escalate privileges via a malicious file. The issue is attributed to an improper or insecure code path in the browser and is listed with a Chromium security ...
CVE-2026-17860
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox URL bar via a malicious file. Chromium security severity: Medium...
CVE-2026-17859
CVE-2026-17859 concerns an inappropriate implementation in Chrome’s favicon handling that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is described as affecting Google Chrome prior to version 151.0.7922.72, with a Chromium security severity of...
EUVD-2026-50608
Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17858
Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17858
Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17857
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17857
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50605
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17856
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17852
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17851
CVE-2026-17851 : Side-channel information leakage in Autofill for Google Chrome. A remote attacker who had compromised the renderer could leak cross-origin data via a crafted HTML page. Affected products are Chrome versions prior to 151.0.7922.72; impact is information disclosure (no exploitation...
CVE-2026-17854
The CVE-2026-17854 entry concerns Google Chrome/Chromium WebMCP with insufficient policy enforcement, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected product is Chromium-based; the vulnerability is tied to WebMCP in Chrome prior to version 151.0.7922....
EUVD-2026-50602
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50601
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17852
CVE-2026-17852 affects Google Chrome’s Media Router component and describes an inappropriate implementation that allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is associated with upstream Chromium bug 519348818 and is stated as affecting Chro...
CVE-2026-17854
Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50599
Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...