CVE-2026-17798

Summary: CVE-2026-17798 affects Google Chrome’s Cast component, where an inappropriate implementation allows a remote attacker to leak cross-origin data via a crafted HTML page. What’s affected: Chrome builds prior to 151.0.7922.72 (Chromium baseline). Impact: Cross-origin data leakage; no exploi...

CVE-2026-17798

Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17796

CVE-2026-17796 involves a side-channel information leakage in WebXR exposed by Google Chrome before 151.0.7922.72. The issue allows a remote attacker to potentially obtain sensitive information from process memory via a crafted HTML page. The described impact is focused on confidentiality (high),...

CVE-2026-17795

CVE-2026-17795 concerns Google Chrome’s GetUserMedia in the renderer. An inappropriate implementation prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer to leak cross-origin data via a crafted HTML page. This is described as a Chromium-level Medium severity ...

CVE-2026-17795

Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17787

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17788

CVE-2026-17788 : In Google Chrome, an inappropriate implementation in the Blink rendering engine allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected versions are those before 151.0.7922.72. The Chromium advisory lists this as a Medium-severity issue with poten...

CVE-2026-17785

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17784

Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17785

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17785

CVE-2026-17785 is an uninitialized use flaw in the ANGLE component of Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (ANGLE in Chromium). Root cause: uninitialized use in ANGLE; impact: potential cross-origin data leakage. Mit...

EUVD-2026-50731

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17783

Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17783

Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50729

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50732

Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17777

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50728

Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...