CVE-2026-17681

Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17681

The CVE-2026-17681 entry is validated by the connected Chrome release data: Google Chrome on Android versions affected prior to 151.0.7922.72 had insufficient validation of untrusted input in Web Authentication, enabling a renderer-compromise–driven sandbox escape via a crafted HTML page. The vul...

EUVD-2026-50800

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-17668

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17665

CVE-2026-17665 : Use-after-free in V8 (Chrome) before 151.0.7922.72. A crafted HTML page can trigger the vulnerability, enabling remote code execution inside the sandbox. The issue is listed as High severity in Chromium/Chrome advisories, and is addressed in the 151.0.7922.71/72 desktop stable-ch...

CVE-2026-17659

Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-17660

CVE-2026-17660 : In Google Chrome, the vulnerability stems from insufficient validation of untrusted input in the Network module, potentially enabling a sandbox escape when a compromised renderer processes a crafted HTML page. Affects Chrome prior to version 151.0.7922.72 (on desktop; Windows/mac...

EUVD-2026-50786

Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17655

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-17656

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-50776

Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-66450

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

Linux Distros Unpatched Vulnerability : CVE-2026-17694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-17893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

PT-2026-66446

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...

Linux Distros Unpatched Vulnerability : CVE-2026-17909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via...

CVE-2025-51684

CVE-2025-51684 affects CleverTap Web SDK v1.15.1. The issue is a Cross Site Scripting (XSS) weakness where untrusted data received via window.postMessage is not sanitized before injecting into the DOM by renderCustomHtml, enabling arbitrary JavaScript execution in the hosting site context. Exploi...

Linux Distros Unpatched Vulnerability : CVE-2026-17780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a...

PT-2026-66108

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Medium...

PT-2026-66141

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description A race condition in the browser allows a remote attacker to perform UI spoofing by using a specially crafted HTML page. UI spoofing is a technique where an attacker mimics a...