CVE-2026-17715

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17714

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-17715

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17715

CVE-2026-17715 concerns Google Chrome Passwords with an inappropriate implementation in Chrome prior to 151.0.7922.72. The flaw allows a remote attacker, via a crafted HTML page and specific UI gestures, to leak cross-origin data. Chromuim security severity is reported as High. The issue affects ...

CVE-2026-17711

CVE-2026-17711: Race in Downloads in Google Chrome on macOS (pre-151.0.7922.72). Exploitation requires a compromised renderer and could enable a sandbox escape via a crafted HTML page; rated High/CRITICAL in the provided data. Affected product/version: Google Chrome on Mac before 151.0.7922.72. R...

CVE-2026-17708

CVE-2026-17708 : Use-after-free in Audio in Google Chrome prior to 151.0.7922.72 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects Chrome’s Audio component and is tied to the Chromium security issue described ...

CVE-2026-17697

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17693

Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17696

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50815

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17691

Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50814

Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50809

Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-17683

CVE-2026-17683 : In Google Chrome, the ANGLE component contains an inappropriate memory handling implementation in versions prior to 151.0.7922.72, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Root cause: flawed ANGLE implemen...

CVE-2026-17680

The CVE-2026-17680 entry concerns a Heap buffer overflow in the Color component of Google Chrome on ChromeOS, prior to 151.0.7922.72. The vulnerability could allow a remote attacker who had compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. The issu...

EUVD-2026-50807

Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50804

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50799

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50800

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-17673

CVE-2026-17673: An integer overflow in QUIC within Google Chrome’s renderer can, via a crafted HTML page, potentially allow a sandbox escape. Affected: Google Chrome (desktop) prior to 151.0.7922.72. Root cause: integer overflow in QUIC handling. Impact: remote code execution with sandbox escape ...