CVE-2026-17840

Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17843

Summary of CVE-2026-17843 : An inappropriate implementation flaw in the CSS component of Google Chrome/Chromium allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome/Chromium before version 151.0.7922.72. Impact is exposure of cross-origin data; ...

CVE-2026-17836

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17837

CVE-2026-17837 concerns insufficient validation of untrusted input in Chrome/Chromium DevTools, enabling potential sandbox escape via a crafted HTML page when the renderer is compromised. The vulnerability affects Google Chrome prior to 151.0.7922.72 and is described across multiple feeds (NVD/Re...

CVE-2026-17836

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50585

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17833

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17834

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17833

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17834

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50582

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17831

CVE-2026-17831 describes insufficient validation of untrusted input in the Passwords component of Google Chrome, fixed in version 151.0.7922.72. The vulnerability could allow a remote attacker who has already compromised the renderer process to perform UI spoofing via a crafted HTML page. The iss...

CVE-2026-17832

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50580

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17827

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17827

CVE-2026-17827 : An inappropriate implementation flaw in the CSS component of Chromium-based Google Chrome allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected software is Google Chrome/Chromium prior to version 151.0.7922.72. Root cause: CSS handl...

CVE-2026-17827

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824

CVE-2026-17824 affects Google Chrome/Chromium ServiceWorker: insufficient policy enforcement allows a remote attacker to bypass same-origin policy via a crafted HTML page. Affected component is the ServiceWorker in Chromium-based browsers; vulnerable versions are before 151.0.7922.72. Root cause:...

CVE-2026-17823

CVE-2026-17823 affects Google Chrome’s WebXR component, where insufficient policy enforcement could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is described as present in Chrome prior to version 151.0.7922.72; affected user impact is defined...