CVE-2026-17907

CVE-2026-17907: Google Chrome’s Network component contains a side-channel information leakage vulnerability. A remote attacker could leverage a crafted HTML page to leak cross-origin data, via a flaw in Chrome prior to version 151.0.7922.72. The issue is documented across multiple feeds (RH Red H...

CVE-2026-17907

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17907

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17905

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50654

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17905

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17905

Google Chrome vulnerability CVE-2026-17905 involves an inappropriate implementation in SurfaceCapture that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome prior to version 151.0.7922.72. Root cause: improper handling in SurfaceCapt...

CVE-2026-17905

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50653

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

CVE-2026-17904 describes an insufficent policy enforcement in NFC within Google Chrome on Android, leading to leakage of cross-origin data via a crafted HTML page. Root cause: policy enforcement gaps in NFC handling. Impact: data leakage classified with Chromium security severity: Low. Affected p...

CVE-2026-64358

A flaw was found in the Linux kernel's media component, specifically within the mtk-jpeg driver. An internal function attempts to cancel a background task even when that task is not active on certain system configurations. This can lead to the system logging warning messages, potentially causing...

CVE-2026-64360

A flaw was found in the Linux kernel. The hfsbnoderead function within the HFS/HFS+ filesystem driver could return without fully initializing a buffer. This could lead to the use of uninitialized memory, potentially causing unpredictable system behavior or the disclosure of sensitive information...

CVE-2026-17902

Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17902

Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17902

CVE-2026-17902 refers to an inappropriate implementation in Editing in Google Chrome on Linux, before version 151.0.7922.72, that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The CVE is rated Low (CVSS 3.1: 3.5) with network attack vector, low complexity, requi...

CVE-2026-17900

Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. Chromium security severity: Low...

CVE-2026-17900

CVE-2026-17900 : In Google Chrome for Windows, an inappropriate Enterprise implementation allowed a remote attacker to leak cross-origin data via a malicious file. Affected versions are prior to 151.0.7922.72. Chromium security severity is Low. Remediation: update to 151.0.7922.72 or later.