CVE-2026-17936

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17934

CVE-2026-17934 involves insufficient validation of untrusted input in Chrome’s DevTools, enabling a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Google Chrome (DevTools). The issue is tied to versions before 151.0.7922.72 (Chromium security severity...

CVE-2026-17934

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50860

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17936

CVE-2026-17936: In Google Chrome, an inappropriate DevTools implementation before version 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability affects the Chrome/Chromium DevTools c...

CVE-2026-17933

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17933

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17933

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17933

CVE-2026-17933 affects Google Chrome prior to 151.0.7922.72 due to an Inappropriate implementation in DOMStorage, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue has a CVSS v3.1 base score of 4.3 (Medium); impact on confidentiality only. Remediation: upgrad...

EUVD-2026-50859

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17933

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50856

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Google Chrome vulnerability CVE-2026-17930 affects Extensions with insufficient validation of untrusted input, enabling privilege escalation for a renderer-compromised process via a crafted HTML page. Affected software: Chrome extensions framework (Chromium-based). Root cause: insufficient input ...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50857

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17928

Summary: CVE-2026-17928 concerns an inappropriate implementation in the DataTransfer component of Google Chrome, allowing a remote attacker to leak cross-origin data through a crafted HTML page. The issue is rooted in Chromium’s DataTransfer handling (upstream reference: chromium issue 513762372)...