1214 matches found
CVE-2026-17936
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50855
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...
CVE-2026-17929
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...
CVE-2026-17854
The CVE-2026-17854 entry concerns Google Chrome/Chromium WebMCP with insufficient policy enforcement, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected product is Chromium-based; the vulnerability is tied to WebMCP in Chrome prior to version 151.0.7922....
CVE-2026-17842
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50754
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17805
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50748
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...
CVE-2026-17787
CVE-2026-17787 refers to an issue in Chromium-based DevTools where an inappropriate DevTools implementation allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Public documents identify affected product family as Google Chrome/Chromium (and related Edge Chromium li...
CVE-2026-17787
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17779
Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17779
CVE-2026-17779 involves an inappropriate implementation in Chrome/Chromium Site Isolation that allows a remote attacker to bypass site isolation using a crafted HTML page. Affected: Google Chrome/Chromium builds prior to 151.0.7922.72. Upstream fix: update to 151.0.7922.72 or later. Impact: parti...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17754
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17754
CVE-2026-17754 is an Inappropriate implementation in Blink affecting Chromium-based Chrome/Edge. Public records in Debian/OpenSUSE/DEBIAN advisories confirm the CVE exists and is addressed in the Chromium 151.0.7922.72+ releases; remediation is to upgrade Chromium/Chrome to a version containing t...
CVE-2026-17703
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...
PT-2026-66453
Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite PADM firmware affected versions not specified Description Improper input validation in the authentication component allows an unauthenticated remote attacker to bypass authentication and gain privileged user access to the...
Linux Distros Unpatched Vulnerability : CVE-2026-17936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gesture...
Linux Distros Unpatched Vulnerability : CVE-2026-17787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
PT-2026-66253
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...