CVE-2026-18017

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18016

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18016

CVE-2026-18016 affects Chrome for iOS (Google Chrome on iOS) before version 151.0.7922.72. The issue is described as insufficient policy enforcement, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The documented impact is limited to UI spoofing with a Low severity in C...

EUVD-2026-50942

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18015

CVE-2026-18015 affects Google Chrome on macOS prior to 151.0.7922.72, due to an inappropriate Tint implementation. A remote attacker could potentially perform a sandbox escape via a crafted HTML page. Severity indicators in the sources vary (Chromium notes Low severity; CVSS suggests high impact)...

CVE-2026-18013

CVE-2026-18013 : In Chrome for iOS (Google Chrome on iOS), prior to version 151.0.7922.72, an inappropriate implementation allowed a remote attacker to spoof UI via a crafted HTML page. This vulnerability is documented with a Chromium severity of Low and a CVSS v3.1 base score of 4.3 (MEDIUM), in...

EUVD-2026-50939

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18014

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-18014

CVE-2026-18014 affects Google Chrome DevTools; insufficient validation of untrusted input allows a remote attacker to bypass navigation restrictions via a malicious file. Affected: Chrome before 151.0.7922.72 (DevTools component). Impact: navigation bypass. Mitigation: upgrade to Chrome 151.0.792...

CVE-2026-18013

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50935

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18009

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18008

CVE-2026-18008 affects Google Chrome prior to 151.0.7922.72 due to an inappropriate implementation in Settings, enabling a remote attacker to perform UI spoofing via malicious network traffic. The CVSSv3.1 base score is 4.3 (Medium); attack vector NETWORK, required user interaction, no confidenti...

CVE-2026-18009

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18008

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18010

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18010

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

EUVD-2026-50936

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18007

CVE-2026-18007 affects Google Chrome on Android. The issue is an inappropriate implementation in Input that enables UI spoofing via a crafted HTML page. Root cause described as an Input handling problem in Chrome’s Android build, with the vulnerability present in versions prior to 151.0.7922.72. ...