CVE-2026-17903

Technical details for CVE-2026-17903 are not provided in the supplied documents. The descriptions mention insufficient policy enforcement in Chromecast/Chrome prior to 151.0.7922.72; no specifics on affected components, impact, or fixes are included. Monitor for updates.

CVE-2026-17974

Google Chrome/Chromium DevTools vulnerability CVE-2026-17974: Insufficient policy enforcement in DevTools allows a local attacker to bypass navigation restrictions via a crafted HTML page. Affected software: Chrome with DevTools. Root cause: DevTools policy enforcement weakness. Impact (per discl...

CVE-2026-17991

CVE-2026-17991 affects Google Chrome prior to 151.0.7922.72. Insufficient validation of untrusted input in AI could allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Practical impact is a sandbox escape if the rende...

CVE-2026-18006

CVE-2026-18006 : AUI spoofing vulnerability in Google Lens within Google Chrome, caused by an inappropriate implementation, allows a remote attacker who has compromised the renderer process to spoof UI via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72 (Chromium-based). Impact is UI...

CVE-2026-6921

CVE-2026-6921 describes a race condition in the GPU component of Google Chrome on Windows, prior to version 147.0.7727.117, that could allow a remote attacker to potentially escape the browser sandbox via a crafted video file. The vulnerability is exposed via a network vector and requires user in...

CVE-2026-8005

Summary: CVE-2026-8005 in Google Chrome involves insufficient validation of untrusted input in the Cast component, enabling a local-network attacker to bypass the same-origin policy. Affected software/area: Google Chrome prior to 148.0.7778.96 (Cast). Root cause / scope: Insufficient input valida...

CVE-2026-8017

CVE-2026-8017 describes a side-channel information leakage in Chrome’s Media stack prior to version 148.0.7778.96. The vulnerability could allow a remote attacker to leak cross-origin data via a crafted HTML page. Reported severity is Low (CVSS 3.1: Vector N/AC/H/PR/N/UI/R/S/U with C/L I/N A/N). ...

CVE-2026-8516

CVE-2026-8516 affects Google Chrome (pre-148.0.7778.168) where insufficient validation of untrusted input in DataTransfer could allow a remote attacker to obtain potentially sensitive information from process memory. The attack requires convincing a user to perform specific UI gestures via a craf...

CVE-2026-8540

CVE-2026-8540 concerns Type Confusion in V8 affecting Google Chrome before 148.0.7778.168, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected component is V8 in Chrome; root cause described as a type confusion vulnerability, enabling ...

CVE-2026-8569

CVE-2026-8569 describes an out-of-bounds write in Codecs of Google Chrome on macOS, prior to 148.0.7778.168, that could enable a remote attacker to potentially perform a sandbox escape via a crafted video file. The vulnerability affects Chrome on macOS; the underlying issue is in the Codecs compo...

CVE-2026-9124

CVE-2026-9124 : In Google Chrome (Chromium-based), there is insufficient validation of untrusted input in Input before version 148.0.7778.179. A remote attacker who compromised the renderer process could leak cross-origin data via a crafted HTML page. The issue is described as Medium severity; co...

CVE-2026-9929

CVE-2026-9929 describes an inappropriate WebGL implementation in Google Chrome on Android prior to 148.0.7778.216, allowing a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability stems from WebGL component behavior in Chromium, with impact described as cross-origin...

CVE-2026-9941

The CVE-2026-9941 entry describes a Use-After-Free vulnerability in ANGLE within Google Chrome (Chromium) prior to version 148.0.7778.216. The issue allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected component: ANGLE in Chromium-based Ch...

CVE-2010-2899

CVE-2010-2899 affects Google Chrome up to version 5.0.375.125 in the layout implementation. The vulnerability is described as an unspecified issue that allows remote attackers to obtain sensitive data from process memory via unknown vectors. The connected documents confirm the affected product an...

CVE-2011-1201

CVE-2011-1201 affects the WebKit context implementation used by Google Chrome prior to version 10.0.648.127. The vulnerability allows remote attackers to cause a denial of service or potentially other unspecified impact via vectors leading to a stale pointer. The connected documents confirm the a...

CVE-2011-2782

Google Chrome on Linux (pre-13.0.782.107) is affected by CVE-2011-2782 due to a drag-and-drop file permission handling flaw that could allow a user‑assisted remote attacker to bypass access restrictions via unspecified vectors. The issue is addressed in Chrome 13.0.782.107 (Stable Channel update)...

CVE-2011-2798

CVE-2011-2798 affects Google Chrome before 13.0.782.107, where access to internal schemes is not properly restricted, enabling remote attackers to influence the browser via a crafted website. The available documents confirm the affected product and the root cause (improper restriction of internal...

CVE-2011-2881

CVE-2011-2881 corresponds to multiple vulnerability entries affecting Google Chrome before 14.0.835.202 . The issue stems from improper handling of Google V8 hidden objects , allowing a remote attacker to cause a denial of service via memory corruption (and possibly other impact). Public referenc...

CVE-2025-8579

CVE-2025-8579 affects Google Chrome/Chromium’s Picture-in-Picture implementation. The connected documents confirm an inappropriate implementation in Picture-in-Picture prior to version 139.0.7258.66 that allows a remote attacker, tricking a user into specific UI gestures, to perform UI spoofing v...

CVE-2026-10901

CVE-2026-10901 is a use-after-free vulnerability in Passwords for Google Chrome on macOS, exploitable when a user is lured into specific UI gestures and visits a crafted HTML page. Affected: Chrome on macOS prior to 149.0.7827.53. Impact: remote code execution via a crafted page; Chromium indicat...

CVE-2026-10942

Summary: CVE-2026-10942 affects Google Chrome on Windows prior to version 149.0.7827.53 due to an incorrect UI implementation, enabling a local attacker to escalate privileges via a malicious file. The vulnerability is described as high severity. What is affected: Google Chrome (Windows) before 1...

CVE-2026-11009

CVE-2026-11009 is a use-after-free vulnerability in Chrome’s USB handling on Windows prior to 149.0.7827.53 that could allow a remote attacker to escape the sandbox via a crafted HTML page. The issue is reported for Chromium-based Chrome (severity: Medium) and is treated as a high-severity, high-...

CVE-2026-11077

CVE-2026-11077 affects Google Chrome (Dawn) and is caused by a bad cast in Dawn that allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected version range is before 149.0.7827.53; the vulnerability is fixed in that release. The CVSS/metrics ind...

CVE-2026-11110

CVE-2026-11110 affects Google Chrome/Chromium's ANGLE component. An uninitialized use in ANGLE prior to 149.0.7827.53 allows a remote attacker to leak cross-origin data via a crafted HTML page. Impact is cross-origin data leakage with Chromium’s Medium severity. Mitigation: update Chrome/Chromium...

CVE-2026-11136

CVE-2026-11136: Use-after-free in Canvas in Google Chrome before 149.0.7827.53 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (Canvas component); root cause: use-after-free condition in Canvas handling. Impact: potent...

CVE-2026-11149

The CVE-2026-11149 entry concerns Google Chrome Extensions with insufficient validation of untrusted input, enabling privilege escalation when a renderer process is compromised. Affected software: Google Chrome prior to version 149.0.7827.53. Root cause: untrusted input validation in Extensions. ...

CVE-2026-11169

The CVE-2026-11169 issue affects Google Chrome (Chromium-based) and is described as an inappropriate XML implementation that enables UXSS via a crafted XML file. Affected software is Chrome prior to version 149.0.7827.53. The underlying cause is an improper XML handling path within Chrome/Chromiu...

CVE-2026-11182

CVE-2026-11182 involves an inappropriate SVG implementation in Google Chrome before 149.0.7827.53 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The underlying issue is in the SVG handling within Chromium-based Chromium builds, leading to cross-origin data e...

CVE-2026-11186

CVE-2026-11186: In Google Chrome, an inappropriate CSS implementation allows UXSS via a crafted HTML page. Affected are Chrome versions prior to 149.0.7827.53 (based on the description); the underlying issue is a faulty CSS handling in Chrome/Chromium that enables remote script/HTML injection. Im...

CVE-2026-11266

CVE-2026-11266 relates to an inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53. This Chromium-based flaw could allow a remote attacker to bypass Safe Browsing by processing a malicious file. The vulnerability is described as low severity (CVSS v3.1: 4.3) with at...

CVE-2026-11271

CVE-2026-11271 affects Google Chrome (component: Passwords) with an inappropriate implementation prior to version 149.0.7827.53. A remote attacker could entice a user to perform specific UI gestures, allowing leakage of cross-origin data via a crafted HTML page. Severity is labeled Low (CVSS 3.1:...

CVE-2026-11274

The CVE-2026-11274 entry concerns Google Chrome on iOS (DOM Distiller) with an inappropriate implementation that allowed a remote attacker to bypass navigation restrictions via a crafted HTML page, before version 149.0.7827.53. Affected component: DOM Distiller in Chrome for iOS. Root cause: inap...

CVE-2026-11276

CVE-2026-11276 concerns Google Chrome (Cast) with an inappropriate implementation allowing a local-network attacker to bypass discretionary access control through malicious traffic, prior to version 149.0.7827.53. Public references in NVD/EUVD/CVEs reiterate the same underlying issue and confirm ...

CVE-2026-11659

CVE-2026-11659 affects Google Chrome on Linux, where an integer overflow in the UI could enable a sandbox-escape via a crafted HTML page. The issue is fixed in Chrome 149.0.7827.103 for Linux (update to 149.0.7827.103 or later). The public description cites a high-severity impact and sandbox-esca...

CVE-2026-11665

CVE-2026-11665: Out-of-bounds read in Dawn within Google Chrome on Windows allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome on Windows (Dawn component); root cause is an out-of-bounds read. Impact is data leakage of cross-origin data. Remediation: patch...

CVE-2026-11666

Google Chrome CVE-2026-11666: Insufficient validation of untrusted input in Input allows UI spoofing via a crafted HTML page in Chrome versions before 149.0.7827.103. Affected: desktop Chrome; root cause is input validation weakness in Input. Impact: remote attacker can spoof UI with crafted page...

CVE-2026-11668

CVE-2026-11668 concerns Google Chrome on Linux and ChromeOS versions before 149.0.7827.103, with an uninitialized use in codecs leading to potential cross-origin data leakage via a crafted video file. The issue is described as high severity; affected: Chrome on Linux/ChromeOS prior to the listed ...

CVE-2026-11679

CVE-2026-11679 : Use-after-free in Codecs within Google Chrome on Windows, fixed in the 149.0.7827.103 (and later) update. The vulnerability could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. Affected product is Google Chrom...

CVE-2026-12030

CVE-2026-12030: Out-of-bounds write in Chrome’s GPU code on Android (pre-149.0.7827.115) potentially enables a sandbox escape when a renderer process is compromised via a crafted HTML page. Affected: Google Chrome for Android; impact: high. Exploitation requires renderer access; remediation: Goog...

CVE-2026-12442

The CVE-2026-12442 entry describes a use-after-free in Passwords in Google Chrome on Android before version 149.0.7827.155, allowing a remote attacker to execute arbitrary code via a crafted HTML page (Chromium security severity: Critical). Connected sources confirm this vulnerability affects Chr...

CVE-2026-13029

CVE-2026-13029: Use-after-free in Web Authentication for Google Chrome, fixed in or after 149.0.7827.197. Affected component: Web Authentication flow; vulnerability arises when a user is convinced to install a malicious Chrome Extension, potentially enabling heap corruption via a crafted extensio...

CVE-2026-13828

CVE-2026-13828 affects Google Chrome Enterprise prior to 150.0.7871.47 where an inappropriate implementation allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page. This vulnerability enables memory disclosure and is described with Chromium ...

CVE-2026-14023

Google Chrome (Chromium) SanitizerAPI in affected builds is vulnerable due to insufficient validation of untrusted input, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected version range is prior to 150.0.7871.47; vendor/chromium references indicate the ...

CVE-2026-14084

CVE-2026-14084 affects Chromoting in Google Chrome, with the vulnerability present in Chromium components prior to 150.0.7871.47. The issue is described as insufficient validation of untrusted input, allowing a remote attacker to potentially trigger heap corruption via malicious network traffic. ...

CVE-2026-14415

In Chrome, CVE-2026-14415 concerns an inappropriate implementation in V8 that affects Google Chrome before version 150.0.7871.46. A remote attacker could exploit the issue by persuading a user to perform specific UI gestures, potentially triggering heap corruption through a crafted HTML page. The...

CVE-2026-14428

The CVE-2026-14428 entry covers Google Chrome on Android (Dawn) with insufficient validation of untrusted input, allowing a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software is Chrome on Android, spe...

CVE-2026-15111

CVE-2026-15111 is a Chrome vulnerability: a use-after-free in Views causing heap corruption when a user is tricked into specific UI gestures on a crafted HTML page. Affected software: Google Chrome prior to 150.0.7871.115. Root cause: use-after-free in Views leading to potential heap corruption. ...

CVE-2026-17690

CVE-2026-17690 : In Google Chrome for Android, before version 151.0.7922.72, the PDF handling component had insufficient validation of untrusted input, enabling a local attacker to leak cross-origin data via a crafted HTML page. The NVD entry lists a CVSS v3.1 base score of 6.5 (Medium) with Netw...

CVE-2026-17699

CVE-2026-17699 is a use-after-free vulnerability in Chrome’s Views component (Chromium) that could allow a local attacker to escape the sandbox via a crafted file. Affected: Google Chrome on supported platforms prior to version 151.0.7922.72. Upstream and vendor advisories (Red Hat, Debian OSV, C...

CVE-2026-17726

CVE-2026-17726 refers to an integer overflow in WebGL inside Google Chrome on Android, before version 151.0.7922.72. The issue could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The CVE’s metrics indicate a network vector with low attack complexity and ...