CVE-2026-17939

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-17939

CVE-2026-17939 affects Google Chrome (Passwords component in Chromium). The upstream description cites insufficient validation of untrusted input in Passwords, enabling a remote attacker to perform UI spoofing via malicious network traffic (Chromium severity: Low). Affected versions are prior to ...

CVE-2026-17903

Technical details for CVE-2026-17903 are not provided in the supplied documents. The descriptions mention insufficient policy enforcement in Chromecast/Chrome prior to 151.0.7922.72; no specifics on affected components, impact, or fixes are included. Monitor for updates.

CVE-2026-17901

CVE-2026-17901 affects Google Chrome on Android (Sharing component). The flaw is insufficient validation of untrusted input that could bypass navigation restrictions via malicious network traffic, previously fixed in Chrome update to 151.0.7922.72+. Downstream advisories (Red Hat, Debian, EU/OSV,...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888

CVE-2026-17888 affects Google Chrome WebUI due to insufficient validation of untrusted input, enabling a remote attacker to potentially perform a sandbox escape via malicious network traffic. The issue is described for Chrome versions before 151.0.7922.72 (Chromium family) with a Medium sever ity...

CVE-2026-17877

CVE-2026-17877 describes an insecure implementation in Chromoting within Google Chrome on Linux prior to 151.0.7922.72, enabling a local attacker to achieve OS-level privilege escalation through malicious network traffic. Affected software: Google Chrome (Linux) with Chromoting. Root cause: inapp...

CVE-2026-17877

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

EUVD-2026-50626

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17849

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via malicious network traffic. Chromium security severity: Medium...

EUVD-2026-50598

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17789

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Medium...

EUVD-2026-50723

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Google Chrome (variations) CVE-2026-17774 involves insufficient validation of untrusted input in Variations, allowing heap corruption via malicious network traffic. Affected are Chrome builds before 151.0.7922.72. The vulnerability requires no user interaction and an adjacent attacker in a privil...

CVE-2026-17761

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17761

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17761

CVE-2026-17761 affects Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72. Root cause: insufficient validation of untrusted input enabling UXSS via malicious network traffic. Impact: ability to inject arbitrary scripts/HTML. Status: fixed in Chrome 151.0.7922.72 (or later); remediation ...

CVE-2026-17716

Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. Chromium security severity: High...

CVE-2026-17716

CVE-2026-17716 describes a use-after-free flaw in Chrome’s Updater on macOS, allowing a local attacker to escalate privileges via malicious network traffic. Affected: Google Chrome/Chromium Updater on Mac. Root cause: use-after-free in Updater. Impact: privilege escalation with high severity (per...