470461 matches found
CVE-2026-17771
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17772
Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17766
CVE-2026-17766 involves insufficient validation of untrusted input in Clipboard on Android Chrome, allowing a local attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome on Android prior to version 151.0.7922.72. Root cause (as stated): inadequate input vali...
EUVD-2026-50715
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50714
Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17765
Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17761
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17761
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
EUVD-2026-50712
Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17763
Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17762
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
CVE-2026-17764 describes an Inappropriate implementation flaw in the FedCM component of Chromium/Google Chrome that allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue affects Chrome/Chromium builds prior to version 151.0.7922.72, with the underlying caus...
CVE-2026-17761
CVE-2026-17761 affects Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72. Root cause: insufficient validation of untrusted input enabling UXSS via malicious network traffic. Impact: ability to inject arbitrary scripts/HTML. Status: fixed in Chrome 151.0.7922.72 (or later); remediation ...
EUVD-2026-50709
Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17757
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17760
CVE-2026-17760 affects Google Chrome with NoStatePrefetch; a side-channel information leakage vulnerability allowed a remote attacker to exfiltrate cross-origin data via a crafted HTML page. The description specifies impact as leakage of cross-origin data and identifies the root cause as NoStateP...
EUVD-2026-50705
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-17755
Google Chrome before 151.0.7922.72 has an Incorrect security UI in Extensions that allows an attacker to use a crafted Chrome Extension to spoof UI if a user is convinced to install the malicious extension. Affected product: Google Chrome (Extensions subsystem). Vulnerability arises from flawed s...