3058836 matches found
CVE-2026-17900
The CVE-2026-17900 affects Google Chrome on Windows before version 151.0.7922.72 due to an inappropriate implementation in Enterprise components, enabling a remote attacker to leak cross-origin data via a malicious file. The vulnerability is cataloged with a low severity and has public references...
CVE-2026-17900
Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. Chromium security severity: Low...
CVE-2026-17901
Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...
EUVD-2026-50649
Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. Chromium security severity: Low...
EUVD-2026-50650
Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...
CVE-2026-17897
Affected software: Google Chrome (ORB). The issue is an inappropriate implementation in the ORB that enables a remote attacker to leak cross-origin data via a crafted HTML page. Impact is cross-origin data exposure; exploitation would require hosting a crafted page to trigger. Vulnerable prior to...
CVE-2026-17897
Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17896
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17898
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17895
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17895
The CVE-2026-17895 entry concerns Google Chrome before 151.0.7922.72, where an inappropriate DataTransfer implementation could allow a remote attacker to leak cross-origin data via a crafted HTML page after convincing a user to perform specific UI gestures. The vulnerability depends on how DataTr...
CVE-2026-17898
CVE-2026-17898 describes a use-after-free in Chrome DevTools prior to 151.0.7922.72. An attacker convincing a user to install a malicious Chrome Extension could exploit this to execute arbitrary code inside a sandbox. A patch is available in Chrome release 151.0.7922.72 and later. If exploitation...
CVE-2026-17896
CVE-2026-17896 is a use-after-free in Chrome’s DevTools prior to version 151.0.7922.72, allowing a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. The issue is documented across NVD and CVE records, indicating the vulnerability exists in DevTools components o...
CVE-2026-17898
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17895
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17897
Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17896
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50647
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...
EUVD-2026-50644
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...