CVE-2026-18009

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a flaw where insufficient validation of untrusted input in Passwords allows a remote attacker to perform UI spoofing via malicious network traffic. The security severity is classified as Low by Chromium, with a CVSS3.1 score of 4.3 ....

CVE-2026-17840

Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17715

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: High...