CVE-2026-17908

CVE-2026-17908 affects Google Chrome on Windows prior to 151.0.7922.72. The issue is insufficient validation of untrusted input in Printing, allowing a renderer-compromised page to potentially escape the sandbox via a crafted HTML page. The impact is sandbox escape with low exposure and low confi...

CVE-2026-17906

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50655

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17906

CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome/Chromium’s Bluetooth handling...

CVE-2026-17893

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50642

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17893

CVE-2026-17893: Google Chrome on macOS with Updater before 151.0.7922.72 is affected by insufficient input validation that could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page. Affected component is the Updater; root cause is input v...

EUVD-2026-50640

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17890

CVE-2026-17890 concerns Google Chrome (DevTools) prior to 151.0.7922.72. The issue is described as insufficient validation of untrusted input in DevTools, which could allow a remote attacker who already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pa...

CVE-2026-17891

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50639

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17890

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17866

CVE-2026-17866 affects Google Chrome on Android (before 151.0.7922.72): Type Confusion in Tab can be exploited by a malicious crafted HTML page after renderer compromise to potentially escape the sandbox. Impact per sources: sandbox escape risk with Low/Low-Impact confidentiality/integrity/availa...

CVE-2026-17866

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50615

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50614

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17865

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17865

CVE-2026-17865 describes an insecure implementation in the Crypto component of Google Chrome on macOS prior to 151.0.7922.72, where a renderer process compromise could enable a sandbox escape via a crafted HTML page. The issue originates in the Chromium Crypto path (upstream bug 520516655). Impac...

CVE-2026-17865

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17856

CVE-2026-17856 affects Google Chrome on macOS before version 151.0.7922.72. An inappropriate implementation in the Network component of Chromium allows a remote attacker who has already compromised a renderer process to potentially perform a sandbox escape via a crafted HTML page. Upstream and Re...