CVE-2026-17691

Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17657

Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50781

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-66151

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This flaw allows a remote attacker who has already compromised t...

PT-2026-66233

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Side-channel information leakage in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Side-channel leakage occu...

PT-2026-66049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Side-channel information leakage in the Autofill feature allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures while...

PT-2026-65997

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out-of-bounds read in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ANGLE is a compatibilit...

PT-2026-66237

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-66257

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the FullScreen feature allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an attacke...

PT-2026-66215

Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66298

Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-66066

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Payments component allows a remote attacker who has compromised the renderer process to perform UI spoofing by using a craft...

PT-2026-66115

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A side-channel information leakage exists in WebXR, which allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page...

PT-2026-66225

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

PT-2026-66103

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A use after free issue exists in the Audio component. This allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by...

CVE-2026-17496

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Google Chrome prior to version 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In AdFilter of Google Chrome, before version 148.0.7778.96, it was possible for a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, using free in Google Chrome’s views allowed a remote attacker who convinced a user to perform certain UI gestures to execute arbitrary code through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...