44915 matches found
CVE-2026-17927
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17928
An inappropriate implementation in the DataTransfer component of Google Chrome prior to version 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a Low security severity in Chromium. Security fixes for this issue are included in the ch...
CVE-2026-17928
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17925
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17925
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50673
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17924
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17923
Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted domain name. Chromium security severity: Low...
CVE-2026-17921
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17922
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17915
An inappropriate implementation in the WebView component of Google Chrome on Android (prior to version 151.0.7922.72 ) allows a remote attacker to perform UI spoofing via a crafted HTML page. The security severity is rated as Low by Chromium. No specific exploitation details or direct remediation...
EUVD-2026-50664
Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50663
Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17914
A side-channel information leakage vulnerability exists in Skia within Google Chrome versions prior to 151.0.7922.72 . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory . The vulnerability is categorized with a Low secu...
EUVD-2026-50661
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17912
An inappropriate implementation in Chrome for iOS allowed a remote attacker to bypass navigation restrictions by using a crafted HTML page . This vulnerability affects Google Chrome on iOS prior to version 151.0.7922.72 . No specific exploit details or mitigation steps were provided in the docume...
CVE-2026-17911
Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17912
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17907
A side-channel information leakage vulnerability exists in the Network component of Google Chrome prior to version 151.0.7922.72 . This flaw allows a remote attacker to leak cross-origin data by navigating a victim to a crafted HTML page . The vulnerability is categorized as Low severity by Chrom...