CVE-2026-17702

CVE-2026-17702 concerns an inappropriate implementation in Skia used by Google Chrome before 151.0.7922.72. The issue enables a remote attacker who has already compromised the renderer process to leak cross-origin data through a crafted HTML page. The Chromium advisory assigns a High severity, no...

CVE-2026-17687

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17686

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-17684

CVE-2026-17684 involves Chrome for iOS prior to 151.0.7922.72, where insufficient validation of untrusted input in the renderer could enable a sandbox escape via a crafted HTML page. The issue arises from input handling within Chrome on iOS (renderer process) and is described as a high-severity, ...

CVE-2026-17680

The CVE-2026-17680 entry concerns a Heap buffer overflow in the Color component of Google Chrome on ChromeOS, prior to 151.0.7922.72. The vulnerability could allow a remote attacker who had compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. The issu...

CVE-2026-17680

Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17681

The CVE-2026-17681 entry is validated by the connected Chrome release data: Google Chrome on Android versions affected prior to 151.0.7922.72 had insufficient validation of untrusted input in Web Authentication, enabling a renderer-compromise–driven sandbox escape via a crafted HTML page. The vul...

EUVD-2026-50802

Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17676

Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17678

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17671

CVE-2026-17671 affects Google Chrome (ANGLE) prior to 151.0.7922.72, where insufficient validation of untrusted input in ANGLE could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. Chromium/Chrome update notes indicate a fix in Stable Channel updates to 151.0....

CVE-2026-17660

Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17657

CVE-2026-17657 affects Google Chrome desktop prior to version 151.0.7922.72. The vulnerability is a use-after-free in Navigation that, if a renderer process is already compromised, could enable a sandbox escape via a crafted HTML page. Chrome’s July 2026 stable-channel update addresses this, with...

CVE-2026-17650

CVE-2026-17650 affects Google Chrome (Chromium-based) prior to 151.0.7922.72. Description: Use-after-free in Compositing could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected component: Compositing in Chrome. Roo...

PT-2026-66325

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

PT-2026-66003

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-65976

Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66027

Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66185

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...