CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17745

CVE-2026-17745 describes an out-of-bounds read in Skia used by Google Chrome, allowing a renderer-compromised remote attacker to potentially escape the sandbox through a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Root cause: Skia OOB read. Impact (as stated): sandbox esc...

EUVD-2026-50695

Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

EUVD-2026-50694

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50692

Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17743

Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17738

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17740

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17740

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50691

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50690

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17740

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17738

CVE-2026-17738 : In Chrome/Chromium, insufficient validation of untrusted input in Payments can allow a renderer-compromised page to trigger a sandbox escape. The vulnerability affects Chrome before 151.0.7922.72 (and corresponding Chromium builds referenced in OSV and Debian advisories). OpenSUS...

CVE-2026-17741

CVE-2026-17741 refers to insufficient validation of untrusted input in WebView for Google Chrome on Android (and the underlying Chromium WebView component). The vulnerability could enable a remote attacker to perform a sandbox escape via a crafted HTML page, as described for Chrome versions older...

CVE-2026-17736

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17737

CVE-2026-17737 describes a use-after-free flaw in Bluetooth handling within Google Chrome on Android, where a renderer-compromised remote attacker could potentially escape the sandbox via a crafted HTML page. Affected software is Google Chrome on Android, with the vulnerability existing in versio...

CVE-2026-17735

Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50681

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50682

Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...