CVE-2026-17949

CVE-2026-17949 affects Google Chrome on Android, where an uninitialized GPU state can be exploited to leak cross-origin data via a crafted HTML page. The vulnerability is in the GPU component of Chrome on Android prior to version 151.0.7922.72. Impact is data leakage from cross-origin contexts. R...

CVE-2026-17951

CVE-2026-17951 describes a heap buffer overflow in Chrome’s WebRTC implementation. A remote attacker could trigger an out-of-bounds memory read by presenting a crafted HTML page. Affected product: Google Chrome (WebRTC component). Impact as stated: out-of-bounds memory read with potential influen...

CVE-2026-17949

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17947

Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17947

CVE-2026-17947 affects Google Chrome’s WebSockets implementation. The vulnerability is a use-after-free in WebSockets prior to version 151.0.7922.72 . Root cause is not explicitly detailed beyond the type; the consequence is that a remote attacker could potentially perform a sandbox escape via a ...

CVE-2026-17947

Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17946

CVE-2026-17946 concerns an uninitialized-use flaw in Dawn within Google Chrome, exploitable by a remote attacker who has already compromised the renderer process. The issue could allow access to potentially sensitive information from process memory via a crafted HTML page. The description consist...

CVE-2026-17944

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17945

CVE-2026-17945 concerns Google Chrome. The issue is “insufficient validation of untrusted input” in the Navigation component, allowing a remote attacker who already compromised the renderer process to perform UI spoofing via a crafted HTML page. Affected software: Google Chrome (prior to version ...

CVE-2026-17944

The provided details describe CVE-2026-17944: an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 . The issue allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The Chromium security severity is noted as Low. No ...

CVE-2026-17944

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17941

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17941

The CVE-2026-17941 entry concerns Chrome for iOS prior to 151.0.7922.72, where an inappropriate implementation allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The affected component is Chrome on iOS, attributed to an implementation flaw in the browser’s handling o...

CVE-2026-17938

Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17937

CVE-2026-17937 affects Google Chrome DevTools; insufficient validation of untrusted input could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected versions are prior to Chrome 151.0.7922.72. Severity is Low. No exploitation details are provided in the sour...

CVE-2026-17934

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17935

CVE-2026-17935 describes a heap buffer overflow in Chrome’s Codecs component, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (Chromium-based). Version detail: prior to 151.0.7922.72; the fix is implied as upgrading ...

EUVD-2026-50861

Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50862

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...