CVE-2026-17945

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17946

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17946

A vulnerability in Google Chrome (prior to version 151.0.7922.72 ) involving an uninitialized use in Dawn allows a remote attacker to leak potentially sensitive information from process memory. This occurs when the attacker has already compromised the renderer process and interacts with a crafted...

CVE-2026-17945

The Google Chrome browser (versions prior to 151.0.7922.72 ) is vulnerable to UI spoofing due to insufficient validation of untrusted input in the Navigation component. A remote attacker who has already compromised the renderer process can exploit this by serving a crafted HTML page. The security...

CVE-2026-17940

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50866

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17940

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17940

The Google Chrome browser on Android versions prior to 151.0.7922.72 is vulnerable to a sandbox escape due to insufficient validation of untrusted input within the Picture-in-Picture functionality. A remote attacker who has already compromised the renderer process can exploit this flaw by using a...

EUVD-2026-50856

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17930

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a privilege escalation issue due to insufficient validation of untrusted input within the Extensions component. A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to escalate privilege...

EUVD-2026-50673

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17924

Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17924

A use-after-free vulnerability exists in the DNS component of Google Chrome prior to version 151.0.7922.72 . A remote attacker who has already compromised the renderer process could potentially perform a sandbox escape by viewing a crafted HTML page. No specific exploits or in-the-wild exploitati...

EUVD-2026-50670

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17921

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17921

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17921

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17921

The Google Chrome browser (prior to version 151.0.7922.72 ) is vulnerable to an insufficient validation of untrusted input flaw within its Navigation component. A remote attacker who has successfully compromised the renderer process can exploit this issue to bypass navigation restrictions by serv...