CVE-2026-17676: Protection Mechanism Failure

Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-66171

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Media Router allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script load...

PT-2026-66157

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An issue in the security user interface allows a remote attacker to perform domain spoofing, which is the act of disguising a website to make it appear as another trusted domain,...

PT-2026-66188

Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66154

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An inappropriate implementation in Chrome for iOS allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, by...

CVE-2026-17697: Access of Resource Using Incompatible Type

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Global Media Controls allows a remote attacker to perform UI spoofing via a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-66327

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Settings component allows a remote attacker to perform UI spoofing through the use of malicious network traffic. UI spoofing is a technique where ...

PT-2026-66259

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Picture-in-Picture feature allows a remote attacker who has compromised the renderer process to potentially perform a sandbo...

PT-2026-65988

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An inappropriate implementation in the software allows a remote attacker to potentially perform a sandbox escape—a process of breaking out of the restricted environment where cod...

PT-2026-66080

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input allows a remote attacker to perform Universal Cross-Site Scripting UXSS, which involves injecting arbitrary scripts or HTML into the...

PT-2026-66107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Autofill feature allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, b...

PT-2026-66071

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A use after free issue exists in Views, which could allow a remote attacker to cause heap corruption through a specially crafted HTML page. Use after free is a memory corruption...

PT-2026-66032

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Accessibility component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox...

PT-2026-66007

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in the Input component. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...

PT-2026-66281

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

PT-2026-66262

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-66231

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...