CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18007

CVE-2026-18007 affects Google Chrome on Android. The issue is an inappropriate implementation in Input that enables UI spoofing via a crafted HTML page. Root cause described as an Input handling problem in Chrome’s Android build, with the vulnerability present in versions prior to 151.0.7922.72. ...

CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18006

CVE-2026-18006 : AUI spoofing vulnerability in Google Lens within Google Chrome, caused by an inappropriate implementation, allows a remote attacker who has compromised the renderer process to spoof UI via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72 (Chromium-based). Impact is UI...

CVE-2026-18003

CVE-2026-18003 concerns Google Chrome on iOS, where an inappropriate implementation in Chrome for iOS prior to 151.0.7922.72 enables a remote attacker to perform UI spoofing via a crafted HTML page. The NVD entry notes a Chromium-based, low-severity issue (CVSS v3.1: 4.3, MEDIUM) with attack vect...

CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18005

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50931

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50930

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18002

CVE-2026-18002 concerns insufficient validation of untrusted input in Google Lens within Chromium-based Google Chrome. The vulnerability, described across multiple feeds, occurs when a renderer process is compromised and a crafted HTML page could enable a sandbox escape through Google Lens compon...

CVE-2026-18002

Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18001

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50927

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18001

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18000

Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17999

CVE-2026-17999: A race condition in Chrome’s PictureInPicture on Android (before 151.0.7922.72) enables a remote attacker to perform domain spoofing via a crafted HTML page. Affected software is Google Chrome on Android; root cause is a race in PictureInPicture logic. The Chromium advisory assign...

CVE-2026-17999

Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50922

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-17996

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...