CVE-2026-17981

CVE-2026-17981: In Blink (Google Chrome), an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72. Impact per provided metrics: Confidentiality: Low; Integrity/Availability: None. Severity: Medium (CVSS 3...

CVE-2026-17973

Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50897

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17971

CVE-2026-17971 affects Google Chrome (Chromium-based) Frame: an inappropriate implementation in Frame before version 151.0.7922.72 could allow a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. The CVE entry notes Chromium security severity as Low, and the vulnerabi...

CVE-2026-17971

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17966

Google Chrome on macOS is affected by CVE-2026-17966 due to an inappropriate implementation in Views prior to version 151.0.7922.72. The issue allows a local attacker to access potentially sensitive information from process memory via a crafted HTML page. Affected component: Chrome Views; root ca...

CVE-2026-17963

The CVE-2026-17963 entry describes an issue in Google Chrome with the SVG implementation, where an inappropriate handling in SVG allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (before 151.0.7922.72). Root cause: inappropriate SVG imple...

EUVD-2026-50888

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17959

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50885

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17959

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50870

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50674

Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17925

Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50671

Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17913

CVE-2026-17913 refers to an Inappropriate implementation in Chrome for iOS (Chromium-based) that could allow UI spoofing via a crafted HTML page. Open-source/official records group this under Chrome for iOS and include it among Chromium-involved issues; the vulnerability is not described as explo...

CVE-2026-17878

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17880

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...