CVE-2026-17921

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17922

Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50664

Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17915

CVE-2026-17915 affects Google Chrome on Android WebView prior to 151.0.7922.72 due to an inappropriate WebView implementation. This allows a remote attacker to perform UI spoofing via a crafted HTML page. The Chromium advisory lists the impact as Low; no exploits are described in the provided doc...

EUVD-2026-50663

Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17914

CVE-2026-17914 describes a side-channel information leakage in the Skia graphics library used by Google Chrome. The issue allows a remote attacker to potentially read sensitive information from process memory when a user visits a crafted HTML page. Affected software is Google Chrome, with the imp...

EUVD-2026-50661

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17912

CVE-2026-17912 : In Chrome for iOS (Google Chrome on iOS), versions prior to 151.0.7922.72 are affected by an inappropriate implementation that allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability is described as low severity in Chromium, with expl...

CVE-2026-17911

Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17907

CVE-2026-17907: Google Chrome’s Network component contains a side-channel information leakage vulnerability. A remote attacker could leverage a crafted HTML page to leak cross-origin data, via a flaw in Chrome prior to version 151.0.7922.72. The issue is documented across multiple feeds (RH Red H...

CVE-2026-17907

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50651

Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17897

Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17885

Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17883

The CVE-2026-17883 entry concerns an inappropriate implementation in Chrome's Headless mode that allows a remote attacker to bypass the Same-Origin Policy via a crafted HTML page. The issue affects Headless in Google Chrome prior to version 151.0.7922.72, with the root cause described as an imple...

EUVD-2026-50630

Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50631

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...