CVE-2026-17885

An inappropriate implementation in Paint within Google Chrome prior to version 151.0.7922.72 allows a remote attacker to leak cross-origin data through a crafted HTML page. This vulnerability is categorized with a Medium security severity. No specific exploit details or remediation steps are prov...

CVE-2026-11113

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...