CVE-2026-17831

CVE-2026-17831 describes insufficient validation of untrusted input in the Passwords component of Google Chrome, fixed in version 151.0.7922.72. The vulnerability could allow a remote attacker who has already compromised the renderer process to perform UI spoofing via a crafted HTML page. The iss...

CVE-2026-17829

CVE-2026-17829 affects Google Chrome’s Passwords component in the Chromium browser. The upstream flaw is an insufficient policy enforcement that allowed a remote attacker to leak cross-origin data through a crafted HTML page. Affects Chromium-based builds prior to version 151.0.7922.72; upstream ...

EUVD-2026-50581

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17832

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17830

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17832

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50580

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17831

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17827

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17827

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17828

CVE-2026-17828 concerns an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome on iOS and is described with a Chromium-based medium severity impact...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17828

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824

CVE-2026-17824 affects Google Chrome/Chromium ServiceWorker: insufficient policy enforcement allows a remote attacker to bypass same-origin policy via a crafted HTML page. Affected component is the ServiceWorker in Chromium-based browsers; vulnerable versions are before 151.0.7922.72. Root cause:...

CVE-2026-17822

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17823

CVE-2026-17823 affects Google Chrome’s WebXR component, where insufficient policy enforcement could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is described as present in Chrome prior to version 151.0.7922.72; affected user impact is defined...

CVE-2026-17822

CVE-2026-17822 describes a race condition in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 that can allow a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome on iOS and is categorized with a medium severity; the attack vector i...