CVE-2026-17853

CVE-2026-17853 affects Google Chrome DevTools. The issue is an inappropriate implementation in DevTools prior to version 151.0.7922.72, allowing a remote attacker who has compromised the renderer to inject scripts or HTML into a privileged page via a crafted HTML page. Remediation: upgrade Chrome...

EUVD-2026-50600

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50602

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17846

The CVE-2026-17846 entry concerns Google Chrome on Windows with an insecure implementation in the Media component. A remote attacker who compromises the renderer could bypass the same-origin policy via a crafted HTML page. Affected product/version: Chrome prior to 151.0.7922.72. Root cause: inapp...

EUVD-2026-50595

Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17834

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17834

CVE-2026-17834 affects Google Chrome prior to 151.0.7922.72 due to insufficient validation of untrusted input in the Passwords component, which could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The description indicat...

EUVD-2026-50583

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17831

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17832

The CVE describes a use-after-free in the ANGLE component used by Google Chrome (pre-151.0.7922.72). If an attacker already compromised the renderer process, they could potentially perform a sandbox escape via a crafted HTML page. This entry is supported by multiple sources in the connected docum...

EUVD-2026-50581

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17816

Affected software: Google Chrome on Android. Vulnerable component: Speech in Chrome’s renderer process. Root cause: Insufficient policy enforcement allowed a renderer-compromised page to escalate privileges. Impact: Privilege escalation via a crafted HTML page (Medium severity per Chromium policy...

CVE-2026-17816

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50765

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17806

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17804

CVE-2026-17804 is a Chrome use-after-free in the Media component prior to version 151.0.7922.72. A remote attacker who compromised the renderer could potentially escape the sandbox by crafting an HTML page, per Chromium advisory. The NVD/CVE records reiterate the same description and note a Mediu...

CVE-2026-17806

CVE-2026-17806 describes insufficient validation of untrusted input in Google Chrome’s Extensions, prior to version 151.0.7922.72. A remote attacker who already compromised the renderer process could potentially escape the sandbox via a crafted HTML page. Affected component: Chrome Extensions (re...

EUVD-2026-50753

Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17803

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-17803

Google Chrome vulnerability CVE-2026-17803 affects the Save to Drive feature. Insufficient validation of untrusted input in Save to Drive allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted PDF. Affects Chrome versions prior to 151.0.7...