CVE-2026-17777

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17777

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17779

Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50728

Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17779

CVE-2026-17779 involves an inappropriate implementation in Chrome/Chromium Site Isolation that allows a remote attacker to bypass site isolation using a crafted HTML page. Affected: Google Chrome/Chromium builds prior to 151.0.7922.72. Upstream fix: update to 151.0.7922.72 or later. Impact: parti...

CVE-2026-17773

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50724

Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17773

CVE-2026-17773 describes an insufficient validation of untrusted input in the Cast component of Chromium-based Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (Chromium) with the Cast component. Root cause: improper inpu...

EUVD-2026-50722

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17775

Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17769

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17771

The CVE-2026-17771 issue is an uninitialized-use flaw in the Skia component of Google Chrome/Chromium, affecting Chrome versions prior to 151.0.7922.72. The flaw can allow a remote attacker to leak cross-origin data via a crafted HTML page. Upstream reference: Chromium issue 513160525. Remediatio...

CVE-2026-17770

The CVE-2026-17770 entry describes an out-of-bounds read in Media in Google Chrome on macOS, allowing a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is tied to Chrome versions before 151.0.7922.72, with the f...

EUVD-2026-50719

Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17772

Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50716

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50715

Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17768

CVE-2026-17768: Insufficient validation of untrusted input in Chrome/Chromium WebSockets (renderer process) could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected product/component: Chromium-based Chrome WebSockets handling; root cause: insufficient input validation...

CVE-2026-17765

Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...