1408547 matches found
EUVD-2026-50592
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50591
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17838
CVE-2026-17838 (Chrome for iOS) : The weakness is an incorrect security UI in Google Chrome on iOS (pre-151.0.7922.72) that allowed a remote attacker to perform domain spoofing via a crafted HTML page. Affects Chrome for iOS versions before 151.0.7922.72. The vulnerability is remediation-able by ...
CVE-2026-17838
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50587
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17835
Chrome on iOS is affected by CVE-2026-17835 due to an inappropriate implementation in the iOS build. A remote attacker could trigger UI spoofing through a crafted HTML page on Chrome for iOS versions prior to 151.0.7922.72. The advisory does not provide exploit specifics; remediation is to upgrad...
CVE-2026-17830
CVE-2026-17830 : In Chrome for iOS (Google Chrome on iOS), prior to version 151.0.7922.72, an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected software: Chrome on iOS. Root cause: improper handling in the navigation logic. ...
CVE-2026-17826
Chrome for iOS (Google Chrome on iOS) is affected by CVE-2026-17826 due to an inappropriate implementation, allowing a remote attacker to leak cross-origin data after a user performs specific UI gestures on a crafted HTML page. The issue affects Chrome versions prior to 151.0.7922.72; upgrading t...
CVE-2026-17822
CVE-2026-17822 is a race in Chrome for iOS prior to version 151.0.7922.72 that enables a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is described as a race condition in Chrome on iOS (Chromium-based). Affected product: Google Chrome for iOS; vulnerable compon...
CVE-2026-17821
CVE-2026-17821 describes insufficient policy enforcement in Google Chrome extensions prior to 151.0.7922.72, allowing a user-assisted attacker to bypass navigation restrictions via a crafted extension. Affected software is Chrome (Extensions component); root cause is policy enforcement gaps enabl...
CVE-2026-17814
CVE-2026-17814 concerns insufficient validation of untrusted input in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 . A remote attacker could bypass navigation restrictions by presenting a crafted HTML page, as described in the provided records. The available documents do n...
EUVD-2026-50763
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17810
Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17797
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50746
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17791
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17782
CVEs details (CVE-2026-17782) : Affected product: Chrome for iOS (Google Chrome on iOS). Vulnerability: Incorrect security UI that allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact: spoofing of URL bar contents is possible, described as a Medium-severity iss...
CVE-2026-17781
Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...
EUVD-2026-50731
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...