Google Chrome Authorization Vulnerability (CNVD-2026-37842)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in FedCM. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome Authorization Vulnerability (CNVD-2026-37840)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing vulnerability, which stems from improper licensing management in the DOM. Attackers can exploit this vulnerability to leak sensitive information through specially crafted HTML pages...

Google Chrome has an authorization vulnerability (CNVD-2026-37834)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a vulnerability related to authorization issues, which stems from improper authorization in the Actor component. Attackers can exploit this vulnerability to obtain sensitive information through specially crafted HTML...

Google Chrome Authorization Issue Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in CORS. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome has an authorization vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a vulnerability related to authorization issues, which stems from the ControlledFrame component lacking proper authorization. Attackers can exploit this vulnerability to bypass system access restrictions through...

ROS-20260915-73-0062

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...

CVE-2026-84188: Improper Neutralization of Input During Web Page Generation

LibreNMS versions = 26.4.0 contain a stored cross-site scripting vulnerability in the graphdescr. configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any...

CVE-2026-16942

The WP Custom HTML Page WordPress plugin, in versions up to and including 0.6.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to sanitize HTML stored through one of its custom page handlers and does not restrict unfiltered HTML submission to autho...

CVE-2026-16942 WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS

The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitise HTML stored through one of its custom page handlers, nor restrict it to users allowed to post unfiltered HTML, allowing users with the Author role to store JavaScript that is served unescaped at a public URL and executes for...

CVE-2026-16942 WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS

The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitise HTML stored through one of its custom page handlers, nor restrict it to users allowed to post unfiltered HTML, allowing users with the Author role to store JavaScript that is served unescaped at a public URL and executes for...

CVE-2026-17973

Google Chrome on Mac versions prior to 151.0.7922.72 is vulnerable to an inappropriate implementation in Views . A local attacker can leverage a crafted HTML page to obtain potentially sensitive information from process memory . While the CVSS3.1 score indicates a MEDIUM severity (5.5) with a hig...

CVE-2026-17873

Google Chrome on iOS prior to version 151.0.7922.72 is vulnerable to a Medium severity security issue due to insufficient policy enforcement . A remote attacker can exploit this flaw by using a crafted HTML page to bypass discretionary access control . No specific exploit details or remediation v...

EUVD-2026-50761

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17797

Google Chrome versions prior to 151.0.7922.72 are affected by a vulnerability involving an inappropriate implementation in CSS . This flaw allows a remote attacker to inject arbitrary scripts or HTML, resulting in a User Experience Scripting (UXSS) attack, via a crafted HTML page. The vulnerabili...

CVE-2026-17769

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27218)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the Dawn component on the Mac platform, where objects continue to be used after being released. Attackers...

Google Chrome heap buffer overflow vulnerability (CNVD-2026-27215)

Google Chrome is a web browser used for accessing web pages and running web applications. Google Chrome has a heap buffer overflow vulnerability. This vulnerability arises due to a flaw in the Skia component that leads to heap buffer overflows. Attackers can exploit this vulnerability to escape t...

EUVD-2026-40755

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-14107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag...

CVE-2026-13973

Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...