5393 matches found
CVE-2026-14045
A vulnerability in the Network component of the Chromium browser (and potentially Microsoft Edge ) allows a remote attacker to leak cross-origin data . The root cause is insufficient validation of untrusted input , which can be triggered via a crafted HTML page by an attacker who has already comp...
CVE-2026-14045
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14045
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14045
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14021
The Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to an insufficient validation of untrusted input flaw in the StorageAccessAPI component. A remote attacker who has compromised the renderer process can exploit this to leak cross-origin data via a crafted HTML page. ...
CVE-2026-14022
The Network component in the Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to an insufficient validation of untrusted input flaw. This vulnerability allows a remote attacker who has already compromised the renderer process to leak cross-origin data by navigating the...
CVE-2026-14021
Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14021
Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14022
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14022
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14022
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14021
Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14019
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14019
An inappropriate implementation flaw in the Passwords component of the Chromium browser (used in Google Chrome and Microsoft Edge ) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability affects versions prior to 150.0.7871.47 and relates to insufficient pr...
CVE-2026-14019
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14016
Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14016
Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14015
A race condition in the WebRTC component of the Chromium browser (affecting Google Chrome on Windows prior to version 150.0.7871.47) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability is categorized as a Medium severity issue. Remediation involves updat...