92773 matches found
CVE-2026-17925
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17926
CVE-2026-17926 : Insufficient validation of untrusted input in Chrome DevTools allows a remote attacker who lures a user into specific UI gestures to bypass navigation restrictions via a crafted HTML page. Affected software: Google Chrome (DevTools component); vulnerable in versions before 151.0....
CVE-2026-17925
The CVE-2026-17925 entry describes an Inappropriate implementation in Cast in Google Chrome on Android, before version 151.0.7922.72, that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. This vulnerability affects Google Chrome’s Cast component on Android a...
CVE-2026-17925
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17926
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17924
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17922
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17921
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17922
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50671
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17922
CVE-2026-17922 involves Inappropriate implementation in Google Chrome prior to 151.0.7922.72, where an issue in the Enterprise channel allowed a remote attacker to execute arbitrary code via a crafted HTML page. The vulnerability is tied to Chromium components and is described with a Chromium sec...
CVE-2026-17918
Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17917
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17917
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-50665
Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17917
CVE-2026-17917 affects Google Chrome on iOS. The issue is an insufficent policy enforcement in Chrome for iOS prior to version 151.0.7922.72, which could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The advisory notes a Chromium-based vulnerability with ...
CVE-2026-17914
Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17914
Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17914
CVE-2026-17914 describes a side-channel information leakage in the Skia graphics library used by Google Chrome. The issue allows a remote attacker to potentially read sensitive information from process memory when a user visits a crafted HTML page. Affected software is Google Chrome, with the imp...