33713 matches found
CVE-2026-17860
CVE-2026-17860 corresponds to an insufficient validation of untrusted input in the Mobile component of Google Chrome on Android. A local attacker could spoof the Omnibox (URL bar) by leveraging a malicious file, with impact described as: bypassing input validation in Chromium/Chrome Mobile prior ...
CVE-2026-17861
CVE-2026-17861 describes insufficient input validation in the Google Chrome Updater prior to 151.0.7922.72, which allowed a local attacker to escalate to OS-level privileges via a malicious file. The affected component is the Updater within Google Chrome (Chromium-based) and the root cause is unt...
EUVD-2026-50606
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17853
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17848
CVE-2026-17848 concerns the Google Chrome/Chromium codecs component where an integer overflow in Codecs could allow a remote attacker to perform a sandbox escape via a crafted video file. Affected: Chrome/Chromium environments using Codecs prior to 151.0.7922.72. The vulnerability arises from ins...
CVE-2026-17836
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17833
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17835
CVE-2026-17835: In Chrome for iOS, Google Chrome on iOS versions before 151.0.7922.72 are vulnerable to UI spoofing via a crafted HTML page. Affected: Chrome for iOS (iOS builds using Chromium). Root cause: Inappropriate implementation within Chrome for iOS leading to spoofed UI. Impact: potentia...
CVE-2026-17828
CVE-2026-17828 concerns an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome on iOS and is described with a Chromium-based medium severity impact...
CVE-2026-17822
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17819
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50768
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17812
CVE-2026-17812 affects Google Chrome/Chromium’s DigitalCredentials component. An inappropriate implementation allowed a remote attacker to perform UI spoofing via a crafted HTML page before version 151.0.7922.72. Public sources from Red Hat and Debian summarize the issue; upstream Chromium notes ...
CVE-2026-17810
CVE-2026-17810 affects Google Chrome prior to 151.0.7922.72, with an Uninitialized Use in the Dawn component that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is characterized in the supplied documents as Medium severity (CVSS: Network, Low Confid...
EUVD-2026-50754
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17803
CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...
CVE-2026-17781
CVE-2026-17781 describes an inappropriate implementation in Chrome’s Extensions component (Chromium) that could allow a user-interaction-required attacker who tricks a user into installing a malicious extension to leak cross-origin data via the extension. Upstream details reference Chromium issue...
CVE-2026-17778
Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-17775
Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...