CVE-2026-17908

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17908

CVE-2026-17908 affects Google Chrome on Windows prior to 151.0.7922.72. The issue is insufficient validation of untrusted input in Printing, allowing a renderer-compromised page to potentially escape the sandbox via a crafted HTML page. The impact is sandbox escape with low exposure and low confi...

CVE-2026-17907

CVE-2026-17907: Google Chrome’s Network component contains a side-channel information leakage vulnerability. A remote attacker could leverage a crafted HTML page to leak cross-origin data, via a flaw in Chrome prior to version 151.0.7922.72. The issue is documented across multiple feeds (RH Red H...

CVE-2026-17907

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50654

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17905

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17906

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50655

Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17904

CVE-2026-17904 describes an insufficent policy enforcement in NFC within Google Chrome on Android, leading to leakage of cross-origin data via a crafted HTML page. Root cause: policy enforcement gaps in NFC handling. Impact: data leakage classified with Chromium security severity: Low. Affected p...

EUVD-2026-50651

Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17903

Technical details for CVE-2026-17903 are not provided in the supplied documents. The descriptions mention insufficient policy enforcement in Chromecast/Chrome prior to 151.0.7922.72; no specifics on affected components, impact, or fixes are included. Monitor for updates.

CVE-2026-17902

CVE-2026-17902 refers to an inappropriate implementation in Editing in Google Chrome on Linux, before version 151.0.7922.72, that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The CVE is rated Low (CVSS 3.1: 3.5) with network attack vector, low complexity, requi...

CVE-2026-17903

Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

EUVD-2026-50649

Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. Chromium security severity: Low...

EUVD-2026-50650

Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

CVE-2026-17899

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Low...

EUVD-2026-50647

Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-17898

CVE-2026-17898 describes a Use-after-free in Chrome’s DevTools prior to 151.0.7922.72. An attacker could convince a user to install a malicious Chrome extension to execute arbitrary code inside a sandbox. The description across NVD, Debian OSV, CVE lists, and CIRCL/Nessus synopses mirrors this sa...

CVE-2026-17895

The CVE-2026-17895 entry concerns Google Chrome. Affected component: DataTransfer in Chrome prior to version 151.0.7922.72. Root cause: Inappropriate implementation in DataTransfer allows a remote attacker to leak cross-origin data when a user is persuaded to perform specific UI gestures on a cra...