CVE-2026-17926

CVE-2026-17926 affects Google Chrome/Chromium DevTools. Insufficient validation of untrusted input in DevTools could allow a remote attacker to bypass navigation restrictions when a user is enticed to perform specific UI gestures on a crafted HTML page. Impact: potential integrity risk with user ...

EUVD-2026-50644

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17895

The CVE-2026-17895 entry concerns Google Chrome. Affected component: DataTransfer in Chrome prior to version 151.0.7922.72. Root cause: Inappropriate implementation in DataTransfer allows a remote attacker to leak cross-origin data when a user is persuaded to perform specific UI gestures on a cra...

CVE-2026-17895

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17887

Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17871

Technical details for CVE-2026-17871 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-17842

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17842

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17842

CVE-2026-17842 affects Google Chrome on iOS (Chrome for iOS) prior to version 151.0.7922.72. The issue is an inappropriate implementation that allows a remote attacker, who convinces a user to perform specific UI gestures, to bypass the same-origin policy via a crafted HTML page. Impact is limite...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17826

CVE-2026-17826 concerns Chrome for iOS (Google Chrome on iOS). The issue is an inappropriate implementation in Chrome for iOS prior to 151.0.7922.72 that could allow a remote attacker who persuades a user to perform specific UI gestures to leak cross-origin data via a crafted HTML page. The docum...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17730

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17715

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-66161

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An inappropriate implementation in Chrome for iOS allows a remote attacker to bypass the same origin policy—a security mechanism that restricts how a document or script loaded fr...

PT-2026-66206

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in the TabStrip component. A remote attacker could potentially exploit heap corruption—a condition where memory allocated on the heap is corrupted—by...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Payments in Google Chrome before version 150.0.7871.115 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...