Chromium: CVE-2026-17861 Insufficient validation of untrusted input in Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-17861

A local attacker can perform OS-level privilege escalation in Google Chrome versions prior to 151.0.7922.72 due to insufficient validation of untrusted input within the Updater component. The vulnerability can be triggered via a malicious file . While the Chromium security severity is rated as Me...

CVE-2026-7997

Google Chrome and Chromium-based browsers, such as Microsoft Edge , are vulnerable to OS-level privilege escalation due to insufficient validation of untrusted input within the Updater component. On macOS , a local attacker can exploit this flaw by providing a malicious file to gain elevated perm...