37577 matches found
CVE-2026-17787
The CVE-2026-17787 issue affects Google Chrome DevTools. It stems from an inappropriate implementation that enables a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected version: Chrome prior to 151.0.7922.72; the issue is mitigated by upgrading to Chrome 151.0.7922...
CVE-2026-17787
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17776
Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17776
CVE-2026-17776 is a policy-bypass in the Receiver component of Google Chrome prior to 151.0.7922.72. A remote attacker who has already compromised the renderer could potentially perform a sandbox escape via a crafted HTML page, as described in upstream/ vendor advisories. The core issue involves ...
CVE-2026-17776
Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50713
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50706
Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50704
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17754
Google Chrome Blink contains an SOP bypass due to an inappropriate implementation, exploitable via a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Impact: remote bypass of the same-origin policy. No exploitation details or remediation information are provided in the connect...
CVE-2026-17754
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17756
Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50693
Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17742
Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50692
Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17742
Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17743
CVE-2026-17743 affects Google Chrome: Insufficient policy enforcement in the ControlledFrame could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue is reported for versions prior to 151.0.7922.72 ; remediation is to update to 151.0.7922.72 or later. Docu...