CVE-2026-17985

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17983

Google Chrome versions prior to 151.0.7922.72 are vulnerable to UI spoofing due to an inappropriate implementation in Global Media Controls . A remote attacker can trigger this by directing a user to a crafted HTML page . Exploitation details or specific exploit links are not provided in the docu...

CVE-2026-17983

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17981

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50908

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17981

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50906

Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17981

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security issue in Blink caused by an inappropriate implementation. A remote attacker can leverage a crafted HTML page to leak cross-origin data . The vulnerability has a Medium base severity (CVSS 3.1: 4.3) and requires user intera...

CVE-2026-17978

A side-channel information leakage exists in the WebCodecs component of Google Chrome prior to version 151.0.7922.72 . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability has been addressed in the updat...

CVE-2026-17975

Google Chrome on Mac versions prior to 151.0.7922.72 is vulnerable to an inappropriate implementation in the IME (Input Method Editor). A remote attacker can leverage this flaw by using a crafted HTML page to obtain potentially sensitive information from process memory . This vulnerability affect...

CVE-2026-17971

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17972

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17971

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17972

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17968

Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17967

A use after free vulnerability exists in Google Chrome on iOS versions prior to 151.0.7922.72 . This flaw allows a remote attacker to potentially trigger heap corruption by interacting with a crafted HTML page. While the Chromium security severity is listed as Low , the CVSS 3.1 score reflects a ...

CVE-2026-17967

Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17964

Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17963

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17963

An inappropriate implementation in SVG within Google Chrome prior to version 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a Low Chromium security severity. Exploitation details and specific mitigations are not provided in the docu...