CVE-2026-18017

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18013

An inappropriate implementation in Google Chrome on iOS prior to version 151.0.7922.72 allows a remote attacker to perform UI spoofing via a crafted HTML page. The impact is characterized by a Low security severity by Chromium, with a Medium base severity (4.3) assigned by CISA-ADP, requiring use...

CVE-2026-18013

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

EUVD-2026-50936

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18007

An inappropriate implementation in the Input component of Google Chrome on Android (prior to version 151.0.7922.72 ) allows a remote attacker to perform UI spoofing by navigating to a crafted HTML page. This vulnerability is categorized with a Low security severity by Chromium and has a CVSS3.1 s...

CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18003

An inappropriate implementation in Google Chrome on iOS prior to version 151.0.7922.72 allows a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability is associated with the chromium package. Exploitation details are not provided in the documents.

CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17995

Google Chrome contains an out of bounds read vulnerability in the Dawn component, affecting versions prior to 151.0.7922.72 . A remote attacker can trigger this memory read by navigating to a crafted HTML page . While Chromium assigned this a low security severity, the CVSS 3.1 score is 8.1 (HIGH...

CVE-2026-17991

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17981

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17972

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50895

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17967

A use after free vulnerability exists in Google Chrome on iOS versions prior to 151.0.7922.72 . This flaw allows a remote attacker to potentially trigger heap corruption by interacting with a crafted HTML page. While the Chromium security severity is listed as Low , the CVSS 3.1 score reflects a ...

CVE-2026-17965

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50891

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17964

Google Chrome on Android versions prior to 151.0.7922.72 is affected by a vulnerability involving an incorrect security UI . This flaw allows a remote attacker to perform domain spoofing by tricking a user into interacting with a crafted HTML page . While the Chromium security severity is rated a...

CVE-2026-17964

Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17965

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...