CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17956

CVE-2026-17956 details (NORMAL mode) : In Google Chrome, an inappropriate implementation in the Scheduling component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected family: Chrome releases prior to 151.0.7922.72. The root cause is tied to th...

CVE-2026-17951

Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

Google Chrome DevTools contains insufficient input validation that could allow a remote attacker to bypass navigation restrictions via a crafted HTML page, affecting Chrome versions prior to 151.0.7922.72. The vulnerability is tied to DevTools handling untrusted input, with a Low severity rating ...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50633

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17883

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17868

CVE-2026-17868 : The provided documents describe an vulnerability in Google Chrome where insufficient policy enforcement in USB handling could enable a remote attacker to escalate privileges via a crafted HTML page. The impact is stated as privilege escalation with high/total impact, and the affe...

CVE-2026-17830

CVE-2026-17830 concerns Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, where an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Root cause: implementation flaw in the iOS Chromium-based webview. Impact: navigation re...

EUVD-2026-50763

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17812

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17759

Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50702

Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17727

Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17727

CVE-2026-17727 describes an out-of-bounds write in WebGL affecting Google Chrome on Android prior to version 151.0.7922.72. The vulnerability could allow a remote, crafted HTML page to potentially escape the Chrome sandbox. Public entries (NVD, Debian, CVE lists, and vendors) consistently describ...

CVE-2026-17721

Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17655

The CVE-2026-17655 advisory affects Google Chrome’s ANGLE component, with insufficient validation of untrusted input leading to a potential sandbox escape via a crafted HTML page. The linked Chrome Stable Channel update notes that version 151.0.7922.71/72 for Windows and macOS (and 151.0.7922.71 ...

CVE-2026-51292

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Linux Distros Unpatched Vulnerability : CVE-2026-17735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...