95625 matches found
CVE-2026-17815
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17817
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17816
Affected software: Google Chrome on Android. Vulnerable component: Speech in Chrome’s renderer process. Root cause: Insufficient policy enforcement allowed a renderer-compromised page to escalate privileges. Impact: Privilege escalation via a crafted HTML page (Medium severity per Chromium policy...
CVE-2026-17817
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17815
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17817
CVE-2026-17817 concerns an inappropriate implementation in Chrome/Chromium’s ReportingAndNEL component that allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected are Google Chrome versions prior to 151.0.7922.72; the upstream fix is in 151.0.7922.72. Citations from...
EUVD-2026-50766
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17816
Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17816
Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17813
CVE-2026-17813 describes an issue in Chrome for iOS (Google Chrome on iOS) where insufficient policy enforcement allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chrome for iOS / Google Chrome on iOS. Vulnerable condition: prior to version 151....
CVE-2026-17811
CVE-2026-17811 is a use-after-free in ANGLE within the Chromium-based Chrome on Windows, allowing a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome prior to version 151.0.7922.72. Upgrading to 151.0.7922.72 or later is the stated remediation.
CVE-2026-17813
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17813
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17811
Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17814
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17812
CVE-2026-17812 affects Google Chrome/Chromium’s DigitalCredentials component. An inappropriate implementation allowed a remote attacker to perform UI spoofing via a crafted HTML page before version 151.0.7922.72. Public sources from Red Hat and Debian summarize the issue; upstream Chromium notes ...
EUVD-2026-50761
Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50763
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17814
CVE-2026-17814 (Chrome for iOS) Insufficient validation of untrusted input in Chrome for iOS prior to 151.0.7922.72 allows remote attackers to bypass navigation restrictions via a crafted HTML page. Affected: Google Chrome on iOS; vulnerability impact (per sources): medium. Exploitation is remote...