EUVD-2026-50745

Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50741

Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50742

Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50737

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

The CVE-2026-17780 issue affects Google Chrome/Chromium’s Isolated Web Apps component. An inappropriate implementation allowed a remote attacker to bypass navigation restrictions using a crafted HTML page, in versions prior to 151.0.7922.72. Impact is described as a bypass of navigation controls ...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50729

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17782

Affected software: Google Chrome on iOS (Chrome for iOS). Vulnerability vector/impact: Incorrect security UI allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Affected version: on iOS prior to 151.0.7922.72. Root cause: security UI flaw in the Omnib...

CVE-2026-17783

Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17782

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17783

CVE-2026-17783 concerns Google Chrome: an inappropriate implementation in the Loader prior to 151.0.7922.72 can allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described as a Chromium security vulnerability with a Medium impact. Affected component is the Ch...

CVE-2026-17775

Google Chrome vulnerability CVE-2026-17775 arises from an inappropriate implementation in the PresentationAPI, affecting Chrome versions prior to 151.0.7922.72. The issue could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact is a cross-origin data leak; the docum...

CVE-2026-17772

CVE-2026-17772: An out-of-bounds read in WebGL in Google Chrome was reported for Chrome versions prior to 151.0.7922.72, enabling a remote attacker to read memory via a crafted HTML page. Multiple feeds (NVD, Debian, Red Hat, CIRCL, EUVD, OSV mirrors) corroborate the flaw as a WebGL WebKit/Chromi...

CVE-2026-17771

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17770

Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50717

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17763

Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17762

CVE-2026-17762 involves an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72, allowing a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is rooted in the Chrome for iOS build, with the impact described as cros...

EUVD-2026-50708

Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...