CVE-2026-17992

CVE-2026-17992 affects Google Chrome on Windows prior to 151.0.7922.72 due to an uninitialized use in Skia. The issue could allow a remote attacker to reading potentially sensitive information from process memory via a crafted HTML page. The Chromium note lists the severity as Low and does not in...

CVE-2026-17993

CVE-2026-17993 is a race condition in Chrome’s Updater on Windows prior to 151.0.7922.72 that could allow a local attacker to escalate privileges by processing a malicious file. The issue is documented for Google Chrome (Chromium) with a Low severity, and the practical impact is local privilege e...

CVE-2026-17991

CVE-2026-17991 affects Google Chrome prior to 151.0.7922.72. Insufficient validation of untrusted input in AI could allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Practical impact is a sandbox escape if the rende...

CVE-2026-17989

CVE-2026-17989 affects Google Chrome’s V8 engine. The vulnerability is a Type Confusion in V8 that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page on versions prior to 151.0.7922.72. The impact is remote code execution with high confidential...

CVE-2026-17990

CVE-2026-17990 affects Google Chrome prior to 151.0.7922.72, where insufficient validation of untrusted input in WebAuthn allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted PDF file. The vulnerability is tied to WebAuthn handling in C...

CVE-2026-17988

CVE-2026-17988 is a Chrome vulnerability affecting the Navigation component. It stems from insufficient validation of untrusted input, letting a remote attacker who has compromised the renderer bypass navigation restrictions via a crafted HTML page in Chrome versions prior to 151.0.7922.72. The w...

CVE-2026-17987

CVE-2026-17987 affects Google Chrome before 151.0.7922.72. The issue is insufficient validation of untrusted input in Notifications, which could let a remote attacker who has compromised the renderer process perform a sandbox escape via a crafted PDF file. The CVSS vector indicates Network access...

CVE-2026-17985

CVE-2026-17985 (Google Chrome) : The Chrome vulnerability is described as insufficient policy enforcement in the Speech component that could allow a remote attacker to bypass site isolation using a crafted HTML page, with affected versions prior to 151.0.7922.72. The issue impacts Chrome’s handli...

CVE-2026-17986

This CVE (CVE-2026-17986) affects Google Chrome and is due to insufficient policy enforcement in Bluetooth, enabling a remote attacker who has compromised the renderer process to bypass the same-origin policy via a crafted HTML page. Affected versions are prior to 151.0.7922.72. The documented im...

CVE-2026-17984

CVE-2026-17984 affects Google Chrome on Android (before 151.0.7922.72). The issue is an inappropriate implementation that allows a local attacker to leak cross-origin data via a crafted HTML page. CVSS shows Low impact (C/L, I/N, A/N) with local access and user interaction required. Remediation i...

CVE-2026-17983

CVE-2026-17983 describes an incorrect security UI implementation in the Chromium-based Global Media Controls of Google Chrome, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome builds prior to 151.0.7922.72, with a reported low severity pe...

CVE-2026-17982

CVE-2026-17982 affects Google Chrome (Cast) with insufficient validation of untrusted input in Cast, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Impact: potential cross-origin issues; severity deemed Low by Chromium. Affected versions are Chrome prior to 1...

CVE-2026-17981

CVE-2026-17981: In Blink (Google Chrome), an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72. Impact per provided metrics: Confidentiality: Low; Integrity/Availability: None. Severity: Medium (CVSS 3...

CVE-2026-17980

CVE-2026-17980 is tied to Google Chrome on Android, with an inappropriate UI implementation prior to version 151.0.7922.72 . The vulnerability allows a remote attacker to leak cross-origin data by persuading a user to perform specific UI gestures on a crafted HTML page. The impact is described as...

CVE-2026-17979

CVE-2026-17979 describes a race in the V8 engine affecting Google Chrome before version 151.0.7922.72 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The description across sources specifies the vulnerability in V8 / Chromium components and...

CVE-2026-17978

CVE-2026-17978 describes a side-channel information leakage in WebCodecs of Google Chrome, prior to version 151.0.7922.72. An attacker could obtain potentially sensitive information from process memory via a crafted HTML page. The CVSS 3.1 base score is 5.3 (Medium) with network attack vector, hi...

CVE-2026-17977

Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome (Chromium base). Root cause: CSS policy bypass. Impact: cross-origin data leakage. Remediation: update to Chrome 151.0.7922.72 ...

CVE-2026-17975

CVE-2026-17975 : An inappropriate implementation flaw was found in the IME component of the Chromium-based Google Chrome browser on macOS, prior to version 151.0.7922.72. The issue could allow a remote attacker to potentially obtain sensitive information from process memory via a crafted HTML pag...

CVE-2026-17976

Google Chrome (

CVE-2026-17974

Google Chrome/Chromium DevTools vulnerability CVE-2026-17974: Insufficient policy enforcement in DevTools allows a local attacker to bypass navigation restrictions via a crafted HTML page. Affected software: Chrome with DevTools. Root cause: DevTools policy enforcement weakness. Impact (per discl...

CVE-2026-17973

CVE-2026-17973 affects Google Chrome on macOS before version 151.0.7922.72, where an inappropriate implementation in Views could allow a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The Chromium-derived issue has a reported CVSS v3.1 base...

CVE-2026-17971

CVE-2026-17971 affects Google Chrome (Chromium-based) Frame: an inappropriate implementation in Frame before version 151.0.7922.72 could allow a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. The CVE entry notes Chromium security severity as Low, and the vulnerabi...

CVE-2026-17972

The CVE-2026-17972 entry describes an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) before version 151.0.7922.72 that allows a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability impacts Chrome on iOS and is categorized with a Chromium-based r...

CVE-2026-17970

CVE-2026-17970 : Google Chrome contains insufficient validation of untrusted input related to the Passwords component, allowing a privileged network attacker to trigger UI spoofing via malicious network traffic. Affects Chrome builds prior to 151.0.7922.72. No exploitation details are provided in...

CVE-2026-17968

CVE-2026-17968 affects Google Chrome on Android and is caused by an uninitialized use in WebXR, enabling a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. The issue is tied to Chrome versions preceding 151.0.7922.72; remediation is to update ...

CVE-2026-17969

CVE-2026-17969 describes an inappropriate implementation in Passwords in Google Chrome before 151.0.7922.72 that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability affects Google Chrome (Chromium-based) and is associated with a high impa...

CVE-2026-17966

Google Chrome on macOS is affected by CVE-2026-17966 due to an inappropriate implementation in Views prior to version 151.0.7922.72. The issue allows a local attacker to access potentially sensitive information from process memory via a crafted HTML page. Affected component: Chrome Views; root ca...

CVE-2026-17967

CVE-2026-17967 affects Chrome for iOS (Google Chrome on iOS). The issue is a use-after-free leading to potential heap corruption when processing crafted HTML pages, reported for Chrome on iOS versions before 151.0.7922.72. The vulnerability can be exploited remotely, with the impact described as ...

CVE-2026-17964

CVE-2026-17964 affects Google Chrome on Android prior to version 151.0.7922.72, where an incorrect security UI could allow a remote attacker to perform domain spoofing via a crafted HTML page. The vulnerability is categorized with a Chromium-based, low-severity impact (CVSSv3.1 base score 4.3; sc...

CVE-2026-17963

The CVE-2026-17963 entry describes an issue in Google Chrome with the SVG implementation, where an inappropriate handling in SVG allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (before 151.0.7922.72). Root cause: inappropriate SVG imple...

CVE-2026-17965

CVE-2026-17965 involves incorrect security UI in Google Chrome on iOS. Chrome for iOS versions prior to 151.0.7922.72 are affected, enabling a remote attacker to trigger UI spoofing via a crafted HTML page. The issue is tied to Chrome’s iOS UI security, with impact described as UI spoofing and a ...

CVE-2026-17962

CVE-2026-17962 concerns an inappropriate implementation flaw in the Blink component of the Chromium-based browser (Google Chrome). The vulnerability enables a remote attacker to inject arbitrary scripts or HTML (UXSS) through a crafted HTML page. Affected version: Google Chrome prior to 151.0.792...

CVE-2026-17961

CVE-2026-17961 refers to an Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 that allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue affects Google Chrome on Android and is described with a Chromium security sev...

CVE-2026-17959

CVE-2026-17959 concerns Google Chrome prior to version 151.0.7922.72, where an inappropriate implementation in the Network component allowed a remote attacker to leak cross-origin data via a crafted HTML page. The NVD entry lists a Chromium-based vulnerability with a Low severity (CVSS 3.1: AV:N/...

CVE-2026-17960

CVE-2026-17960 describes insufficient policy enforcement in Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, where a remote attacker could bypass the no-referrer policy via a crafted HTML page. The issue affects Chrome on iOS and is rooted in policy enforcement; the exact component/f...

CVE-2026-17958

CVE-2026-17958 involves an inappropriate implementation in the Views component of Google Chrome before 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The referenced impact level is Chromium security severity: Low, with CVSS‑3.1 metrics showing Network ac...

CVE-2026-17956

CVE-2026-17956 details (NORMAL mode) : In Google Chrome, an inappropriate implementation in the Scheduling component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected family: Chrome releases prior to 151.0.7922.72. The root cause is tied to th...

CVE-2026-17957

The CVE-2026-17957 entry concerns Google Chrome with an improper CORS implementation in the renderer prior to version 151.0.7922.72. The issue could allow a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. According to the provided data, ...

CVE-2026-17955

CVE-2026-17955 affects Google Chrome (Payments in Chromium) and is caused by insufficient validation of untrusted input, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is documented with a Chromium severity of Low and is addressed by updating to Chrom...

CVE-2026-17954

CVE-2026-17954 affects Google Chrome’s MHTML handling. A policy bypass in MHTML could leak cross-origin data via a crafted MHTML page, as described for Chrome versions prior to 151.0.7922.72. The vulnerability is rated low by Chromium, with network attack vector and user interaction required. Aff...

CVE-2026-17952

CVE-2026-17952 affects Google Chrome’s V8 engine prior to 151.0.7922.72. The issue arises from an inappropriate implementation in V8 that allows an attacker, by convincing a user to install a crafted Chrome extension, to execute arbitrary code inside Chrome’s sandbox. Practical impact is arbitrar...

CVE-2026-17953

CVE-2026-17953 : An insufficient policy enforcement flaw in the WebView component of Chromium-based Google Chrome on Android allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Upstream and Red Hat notes attribute the issue to inadequate WebView policy enforcement;...

CVE-2026-17949

CVE-2026-17949 affects Google Chrome on Android (GPU usage) where an uninitialized use in the GPU could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact is described as Low severity with potential data leakage. The vulnerability is addressed in Chrome versions up ...

CVE-2026-17951

CVE-2026-17951 is a heap buffer overflow in Chrome’s WebRTC that allows a remote attacker to read out-of-bounds memory via a crafted HTML page. Affected product: Google Chrome prior to 151.0.7922.72 (WebRTC component). Underlying cause: heap buffer overflow in WebRTC. Impact: confidentiality, int...

CVE-2026-17950

CVE-2026-17950 affects Google Chrome on macOS due to an inappropriate Safebrowsing implementation. A remote attacker could execute arbitrary code via a malicious file in versions prior to 151.0.7922.72 (Chromium security severity: Low; CVSSv3.1 base score 8.8). Root cause: flawed Safebrowsing log...

CVE-2026-17947

CVE-2026-17947 is a use-after-free vulnerability in Chrome’s WebSockets implementation, affecting builds prior to 151.0.7922.72. The issue could allow a remote attacker to escape the sandbox via a crafted HTML page. The CVSS v3.1 vector indicates Network attack, no user privileges, with user inte...

CVE-2026-17948

CVE-2026-17948 affects Google Chrome’s V8 engine prior to version 151.0.7922.72. The issue is a Type Confusion in V8 that could allow an attacker, by convincing a user to install a crafted malicious extension, to execute arbitrary code inside the browser sandbox. Remediation is to upgrade to Chro...

CVE-2026-17946

CVE-2026-17946 affects Google Chrome components (Dawn) in Chromium before 151.0.7922.72. The issue is an uninitialized use in Dawn that could allow a remote attacker, who already compromised the renderer process, to read potentially sensitive data from process memory via a crafted HTML page. Seve...

CVE-2026-17945

CVE-2026-17945 affects Google Chrome’s Navigation in versions prior to 151.0.7922.72. The issue arises from insufficient validation of untrusted input, allowing a renderer-compromised attacker to perform UI spoofing via a crafted HTML page. The reported impact is UI spoofing with low severity; ex...

CVE-2026-17944

CVE-2026-17944 : In Chrome for iOS (Google Chrome on iOS), an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue is described as present in versions prior to 151.0.7922.72. Root cause: flawed navigation restriction handling ...