DEBIAN-CVE-2026-17750

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17674

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50941

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18017

A use after free vulnerability exists in the Dawn component of Google Chrome (prior to version 151.0.7922.72 ). A remote attacker can leverage this flaw by serving a crafted HTML page to execute arbitrary code within a sandbox. This vulnerability has been addressed in subsequent updates; for inst...

CVE-2026-18016

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18015

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50931

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17994

Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17982

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security issue in the Cast component. The root cause is insufficient validation of untrusted input , which allows a remote attacker to bypass the same-origin policy by interacting with a crafted HTML page. This vulnerability is ass...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17956

An inappropriate implementation in Scheduling within Google Chrome (prior to version 151.0.7922.72 ) allows a remote attacker to execute arbitrary code inside a sandbox by navigating to a crafted HTML page. This vulnerability is reported with a Chromium security severity of Low ; however, it is a...

CVE-2026-17951

Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

Google Chrome (prior to version 151.0.7922.72 ) is vulnerable to a security issue where insufficient validation of untrusted input in DevTools allows a remote attacker to bypass navigation restrictions. An attacker can achieve this by tricking a user into visiting a crafted HTML page . The vulner...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50633

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17883

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17868

Google Chrome versions prior to 151.0.7922.72 are vulnerable to privilege escalation due to insufficient policy enforcement in the USB component. A remote attacker can exploit this by having a user visit a crafted HTML page . Exploitation details are not provided in the documents. Remediation is ...

CVE-2026-17868

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17830

In Google Chrome on iOS prior to version 151.0.7922.72 , an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page . This vulnerability was assigned a Medium severity by the Chromium security team. No specific exploit details or remediatio...