CVE-2026-17754

Google Chrome Blink contains an SOP bypass due to an inappropriate implementation, exploitable via a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Impact: remote bypass of the same-origin policy. No exploitation details or remediation information are provided in the connect...

CVE-2026-17756

Chrome's Presentation component suffers from insufficient policy enforcement, enabling a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected software: Google Chrome prior to version 151.0.7922.72 (fixed in 151.0.7922.72 or later). Root cause: insufficient policy en...

CVE-2026-17753

CVE-2026-17753 involves an insecure Autofill implementation in Google Chrome before 151.0.7922.72, which could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described as a Chromium security medium severity (base CVSS 4.3, AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A...

CVE-2026-17751

CVE-2026-17751 : In Google Chrome, the AdFilter component in Chromium contains an inappropriate implementation that enables a remote attacker to run arbitrary code inside the sandbox via a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Impact: potential full sandbox escape. ...

CVE-2026-17749

Chrome Extensions unauthenticated input validation vulnerability: insufficient validation of untrusted input in Extensions in Google Chrome before 151.0.7922.72 allowed a user-assisted sandbox escape via a crafted extension. Affected: Chrome Extensions component; root cause is input validation. I...

CVE-2026-17750

CVE-2026-17750 describes a use-after-free in ANGLE used by Google Chrome, enabling a remote attacker to potentially escape the browser sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE component within Chrome and is triggered in Chrome versions prior to 151.0.7922.72. The de...

CVE-2026-17752

CVE-2026-17752 affects Google Chrome on macOS prior to 151.0.7922.72. The issue is a use-after-free in the Views component that can lead to heap corruption via a crafted HTML page, enabling remote exploitation. The public descriptions consistently state heap-related impact with high severity; the...

CVE-2026-17746

CVE-2026-17746 is a use-after-free in the GPU component of Google Chrome on macOS, affecting versions before 151.0.7922.72. The issue permits a remote attacker who already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. The connected sources corr...

CVE-2026-17747

CVE-2026-17747: An insufficient validation of untrusted input flaw was found in the Payments component of Google Chrome on Android. The issue stems from inadequate input validation in Payments, allowing a remote attacker who had already compromised the renderer process to perform UI spoofing via ...

CVE-2026-17748

In this CVE, Google Chrome’s Extensions component has an inappropriate implementation leading to a bypass of site isolation. A remote attacker who already compromised the renderer process could exploit a crafted HTML page to bypass isolation, with impact described as Medium. A fix is available in...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

CVE-2026-17745

CVE-2026-17745 describes an out-of-bounds read in Skia used by Google Chrome, allowing a renderer-compromised remote attacker to potentially escape the sandbox through a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Root cause: Skia OOB read. Impact (as stated): sandbox esc...

CVE-2026-17742

CVE-2026-17742 affects Google Chrome’s Payments feature. The vulnerability arises from insufficient policy enforcement in Payments, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Root cause: inadequate enforcement within the Chrome Payments code path. Impact: potent...

CVE-2026-17743

CVE-2026-17743 affects Google Chrome: Insufficient policy enforcement in the ControlledFrame could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue is reported for versions prior to 151.0.7922.72 ; remediation is to update to 151.0.7922.72 or later. Docu...

CVE-2026-17740

CVE-2026-17740 affects Google Chrome via an uninitialized use in ANGLE, before version 151.0.7922.72. A crafted HTML page could allow a remote attacker to leak cross-origin data. The Chromium-based severity is listed as Medium. Affected software is Chrome (ANGLE component); root cause is uninitia...

CVE-2026-17739

CVE-2026-17739 describes insufficient policy enforcement in Google Chrome Extensions, allowing UXSS when a user installs a malicious extension. Affected software is Google Chrome (desktop/mobile) with the vulnerability present in versions before 151.0.7922.72. The underlying issue is insecure han...

CVE-2026-17741

CVE-2026-17741 refers to insufficient validation of untrusted input in WebView for Google Chrome on Android (and the underlying Chromium WebView component). The vulnerability could enable a remote attacker to perform a sandbox escape via a crafted HTML page, as described for Chrome versions older...

CVE-2026-17738

The CVE-2026-17738 entry concerns Google Chrome. The issue is insufficient validation of untrusted input in the Payments component, affecting Chrome versions prior to 151.0.7922.72. Exploitation requires a renderer process compromise and could allow a sandbox escape via a crafted HTML page. The d...

CVE-2026-17737

CVE-2026-17737 describes a use-after-free flaw in Bluetooth handling within Google Chrome on Android, where a renderer-compromised remote attacker could potentially escape the sandbox via a crafted HTML page. Affected software is Google Chrome on Android, with the vulnerability existing in versio...

CVE-2026-17736

CVE-2026-17736 affects Google Chrome on Android (WebView) with insufficient validation of untrusted input in WebView, allowing a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The issue is described as affecting Android builds prior to 151.0.7922.7...

CVE-2026-17735

CVE-2026-17735 concerns insufficient validation of untrusted input in the BFCache feature of Google Chrome, prior to version 151.0.7922.72. The issue could allow a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox via a crafted HTML page. A...

CVE-2026-17731

The CVE-2026-17731 entry describes an Inappropriate implementation in Autofill in Google Chrome on Android, prior to version 151.0.7922.72, that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The underlying issue is the Autofill implementation, with a security impact...

CVE-2026-17733

In Chrome on Android, CVE-2026-17733 is tied to an inappropriate QUIC implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected product/component: Google Chrome (Android) with QUIC; root cause: insecure QUIC handling leading to cross-origin data...

CVE-2026-17730

Technical details for CVE-2026-17730 are not provided in the connected documents; the initial description contains limited information. Please monitor for updates.

CVE-2026-17734

CVE-2026-17734 affects Google Chrome’s Autofill on all platforms. The root cause is an inappropriate Autofill implementation that allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Impact is limited to a UXSS scenario with Medium severity; no exploit deta...

CVE-2026-17729

CVE-2026-17729 is a use-after-free in the V8 engine used by Google Chrome, prior to version 151.0.7922.72. The issue arises when a renderer-process compromise allows a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Affected component: V8 in Chrome. Root cause: use...

CVE-2026-17732

CVE-2026-17732 affects Google Chrome’s SVG implementation in Chromium, where an inappropriate SVG handling flaw could allow a remote attacker to leak cross-origin data via a crafted HTML page. Upstream references point to Chromium issue 476646486; affectedChromium/Chrome versions were prior to 15...

CVE-2026-17728

CVE-2026-17728 describes an insecure implementation in Google Chrome extensions prior to build 151.0.7922.72, where a crafted HTML page could lead to UXSS by remote code injection. The base description notes an inappropriate implementation in Extensions that enables an attacker to inject arbitrar...

CVE-2026-17758

CVE-2026-17758: Heap buffer overflow in Dawn component of Google Chrome. The vulnerability affects Chrome builds prior to 151.0.7922.72, enabling a remote attacker to potentially perform a sandbox escape through a crafted HTML page. This entry is supported by multiple sources in the connected doc...

CVE-2026-17727

CVE-2026-17727 describes an out-of-bounds write in WebGL affecting Google Chrome on Android prior to version 151.0.7922.72. The vulnerability could allow a remote, crafted HTML page to potentially escape the Chrome sandbox. Public entries (NVD, Debian, CVE lists, and vendors) consistently describ...

CVE-2026-17726

CVE-2026-17726 refers to an integer overflow in WebGL inside Google Chrome on Android, before version 151.0.7922.72. The issue could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The CVE’s metrics indicate a network vector with low attack complexity and ...

CVE-2026-17725

CVE-2026-17725 is a Type Confusion in V8 affecting Google Chrome prior to 151.0.7922.72. The flaw allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Chrome/Chromium with V8 as the JavaScript engine; the NVD and Debian OSV ent...

CVE-2026-17722

CVE-2026-17722 corresponds to an object lifecycle issue in WebView of Google Chrome on Android, affecting versions prior to 151.0.7922.72. A remote attacker who has already compromised the renderer process could potentially escape the Chrome sandbox via a crafted HTML page, per NVD and related fe...

CVE-2026-17721

CVE-2026-17721 : Out-of-bounds write in ANGLE within Google Chrome before 151.0.7922.72 could allow a remote attacker to attempt a sandbox escape via a crafted HTML page. The vulnerability is rooted in ANGLE, affecting Chrome's rendering/sandbox components, with a high severity (CRITICAL) per the...

CVE-2026-17723

CVE-2026-17723 relates to a use-after-free in Media in Google Chrome on Windows prior to 151.0.7922.72. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. The issue is described as high severity (CVSS 3.1/8.3) with networ...

CVE-2026-17724

CVE-2026-17724 describes a race condition in Chrome for iOS (Chrome on iOS) prior to version 151.0.7922.72 that allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. The impact, as stated, is exploitation from a remote site with a network attack vector and u...

CVE-2026-17717

CVE-2026-17717 : Integer overflow in ANGLE within Google Chrome leads to a potential sandbox escape via a crafted HTML page. Affected software is Google Chrome (ANGLE component in Chromium). The described impact is high/critical, with exploitation described as remote and requiring a crafted HTML ...

CVE-2026-17718

CVE-2026-17718 affects Google Chrome/Chromium ANGLE. A use-after-free in ANGLE could allow a remote attacker to escape the browser sandbox via a crafted HTML page. Impact is described as high/critical; no exploitation details are provided in the sources. The issue is addressed in Chrome/Chromium ...

CVE-2026-17719

CVE-2026-17719 is a Use-after-free in Chrome’s Input handling (Chromium) affecting Google Chrome prior to 151.0.7922.72. The vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The confirmed impact is remote code execution with high...

CVE-2026-17720

CVE-2026-17720 describes insufficient policy enforcement in Passwords handling in Google Chrome prior to 151.0.7922.72, enabling a remote attacker who compromised the renderer process to leak cross-origin data via a crafted HTML page. Impact is described as cross-origin data leakage; CVSS metrics...

CVE-2026-17716

CVE-2026-17716 describes a use-after-free flaw in Chrome’s Updater on macOS, allowing a local attacker to escalate privileges via malicious network traffic. Affected: Google Chrome/Chromium Updater on Mac. Root cause: use-after-free in Updater. Impact: privilege escalation with high severity (per...

CVE-2026-17714

CVE-2026-17714 affects the ANGLE component in Google Chrome. An uninitialized use flaw allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. Upstream details reference Chromium issue 521293438; Red Hat/Debian notes confirm the ANGLE root c...

CVE-2026-17715

CVE-2026-17715 concerns Google Chrome Passwords with an inappropriate implementation in Chrome prior to 151.0.7922.72. The flaw allows a remote attacker, via a crafted HTML page and specific UI gestures, to leak cross-origin data. Chromuim security severity is reported as High. The issue affects ...

CVE-2026-17711

CVE-2026-17711: Race in Downloads in Google Chrome on macOS (pre-151.0.7922.72). Exploitation requires a compromised renderer and could enable a sandbox escape via a crafted HTML page; rated High/CRITICAL in the provided data. Affected product/version: Google Chrome on Mac before 151.0.7922.72. R...

CVE-2026-17712

CVE-2026-17712 refers to a race condition in the Skia graphics library used by the Chromium-based Google Chrome browser. The upstream flaw allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page, with the impact described as high severity. Affected pr...

CVE-2026-17710

CVE-2026-17710 is a concrete Chromium-based Chrome vulnerability affecting the MHTML component on macOS. The issue is an inappropriate implementation in MHTML that could allow a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML pa...

CVE-2026-17713

CVE-2026-17713 affects Google Chrome on Android before version 151.0.7922.72, due to insufficient validation of untrusted input in Accessibility. A compromised renderer process could potentially escape the sandbox via a crafted HTML page. The issue is categorized as High severity with a critical ...

CVE-2026-17708

CVE-2026-17708 : Use-after-free in Audio in Google Chrome prior to 151.0.7922.72 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects Chrome’s Audio component and is tied to the Chromium security issue described ...

CVE-2026-17707

CVE-2026-17707 is a Google Chrome vulnerability affecting Windows builds prior to 151.0.7922.72, caused by an uninitialized use in Media. A renderer process compromise could let an attacker read sensitive data from process memory via a crafted HTML page. The issue is listed as High severity and i...

CVE-2026-17709

CVE-2026-17709 describes a race in Downloads in Google Chrome on macOS prior to 151.0.7922.72 that could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. The description notes a Chromium security severity of High/CRITICAL and re...