1408540 matches found
CVE-2026-17922
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17897
Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50637
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...
EUVD-2026-50634
Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17881
CVE-2026-17881 involves an integer overflow in WebXR affecting Google Chrome before version 151.0.7922.72. The vulnerability could allow a remote attacker to execute arbitrary code within the browser sandbox via a crafted HTML page. Affected component: WebXR in Chrome; root cause: integer overflo...
EUVD-2026-50631
Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-17879
CVE-2026-17879 describes an inappropriate implementation in Chrome’s Autofill prior to version 151.0.7922.72 that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Autofill component and its handling of cross-origin data. The available co...
EUVD-2026-50627
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50623
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17870
The CVE covers Google Chrome’s Cast component. In Chrome versions before 151.0.7922.72, there is insufficient validation of untrusted input in the Cast feature, which could allow an attacker on the local network segment to leak cross-origin data through malicious network traffic. Impact is restri...
EUVD-2026-50615
Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50612
Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2026-17858
CVE-2026-17858 affects Google Chrome on Windows prior to 151.0.7922.72, due to an uninitialized use in WebNN. This could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impact is described as medium. Affected component is WebNN within Chrome, with the ...
EUVD-2026-50602
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50599
Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17840
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50591
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50589
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...