CVE-2026-17976

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. Chromium security severity: Low...

CVE-2026-17976

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. Chromium security severity: Low...

CVE-2026-17930

Google Chrome vulnerability CVE-2026-17930 affects Extensions with insufficient validation of untrusted input, enabling privilege escalation for a renderer-compromised process via a crafted HTML page. Affected software: Chrome extensions framework (Chromium-based). Root cause: insufficient input ...

EUVD-2026-50856

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-64388

A flaw was found in the Linux kernel's Server Message Block SMB client. When mounting filesystems using SMB3 POSIX Extensions, modifications to file ownership chown and group chgrp were not correctly applied on the server unless specific mount options were also enabled. This could allow a local...

CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17882

CVE-2026-17882 is a policy-bypass flaw in Chrome Extensions. Affects the Extensions component of Google Chrome before 151.0.7922.72; a user tricked into installing a malicious extension could bypass site isolation via a crafted Chrome Extension. Upstream chromium issue 523637452 is cited. Accordi...

EUVD-2026-50631

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17821

Affected product: Google Chrome Extensions component (Chromium-based browser). Vulnerable: Extensions policy enforcement vulnerability that allowed bypassing navigation restrictions via a crafted Chrome Extension, due to insufficient policy enforcement. Root cause: upstream Chromium issue 5175979...

EUVD-2026-50770

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17809

CVE-2026-17809 involves insufficient validation of untrusted input in the Chrome Extensions component, allowing a remote attacker who compromises the renderer to potentially escape the sandbox via a crafted HTML page. Upstream details point to Chromium issue 516813317. Affected software is Google...

CVE-2026-17809

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50758

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17809

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17806

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17806

CVE-2026-17806 : Insufficient validation of untrusted input in the Extensions component of Google Chrome/Chromium allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected product: Google Chrome (Extensions). Upstr...

CVE-2026-17806

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...