CVE-2026-17977

Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17973

CVE-2026-17973 affects Google Chrome on macOS before version 151.0.7922.72, where an inappropriate implementation in Views could allow a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The Chromium-derived issue has a reported CVSS v3.1 base...

CVE-2026-17957

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17952

CVE-2026-17952 affects Google Chrome’s V8 engine prior to 151.0.7922.72. The issue arises from an inappropriate implementation in V8 that allows an attacker, by convincing a user to install a crafted Chrome extension, to execute arbitrary code inside Chrome’s sandbox. Practical impact is arbitrar...

CVE-2026-17942

Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17942

CVE-2026-17942: Side-channel information leakage in SVG handling in Google Chrome prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (SVG component). Impact: cross-origin data leakage. Remediation: update to Chrome 15...

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17932

CVE-2026-17932 describes a use-after-free in DataTransfer for Google Chrome on Windows prior to 151.0.7922.72. The underlying issue is an object lifetime mismanagement in DataTransfer, enabling a local attacker to read potentially sensitive process memory via a crafted HTML page. The vulnerabilit...

EUVD-2026-50859

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17924

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17924

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17916

Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17914

Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17911

CVE-2026-17911 affects Google Chrome prior to 151.0.7922.72, where insufficient policy enforcement in SVG could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is described with a Chromium-based impact of data leakage (CVSS: Medium, 4.3) and does not i...

CVE-2026-17905

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17897

Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17895

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50646

Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...