CVE-2026-17926

CVE-2026-17926 affects Google Chrome/Chromium DevTools. Insufficient validation of untrusted input in DevTools could allow a remote attacker to bypass navigation restrictions when a user is enticed to perform specific UI gestures on a crafted HTML page. Impact: potential integrity risk with user ...

CVE-2026-17895

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17887

CVE-2026-17887 is a Use-After-Free in Chrome's TabStrip prior to 151.0.7922.72 that could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. Affected product: Google Chrome (Chromium-based); root cause is use-after-free ...

EUVD-2026-50636

Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17874

CVE-2026-17874 affects Google Chrome on iOS (Chrome for iOS). The vulnerability stems from an inappropriate implementation in Chrome for iOS prior to version 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. Impact is UI spoofing; exploitation details are n...

CVE-2026-17871

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50620

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17841

CVE-2026-17841 describes a race condition in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 that allows a remote attacker to spoof UI via a crafted HTML page. The vulnerability affects the iOS build of Chrome using Chromium components and has a reported CVSSv3.1 base score o...

CVE-2026-17840

CVE-2026-17840 affects Google Chrome/Chromium Passwords UI, where an incorrect security UI allowed domain spoofing via a crafted HTML page. The vulnerability is tied to Chrome/Chromium’s Passwords component and is mitigated by upgrading to Chrome 151.0.7922.72 or newer, as indicated by upstream C...

CVE-2026-17839

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17838

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17828

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17827

CVE-2026-17827 : An inappropriate implementation flaw in the CSS component of Chromium-based Google Chrome allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected software is Google Chrome/Chromium prior to version 151.0.7922.72. Root cause: CSS handl...

EUVD-2026-50575

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17822

CVE-2026-17822 describes a race condition in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 that can allow a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome on iOS and is categorized with a medium severity; the attack vector i...

CVE-2026-17819

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17795

Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17795

Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...