EUVD-2026-50764

Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17815

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a medium-severity issue involving insufficient policy enforcement in GuestView . This flaw allows a remote attacker to leak cross-origin data by using a crafted HTML page. While specific exploit details are not provided, the vulnerab...

PT-2026-66134

Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13871

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13871

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13871

Google Chrome and Microsoft Edge are vulnerable to a security flaw in the GuestView component caused by insufficient policy enforcement . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to bypass site isolation and compromise data i...

PT-2026-54148

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in GuestView allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site...