Vulnerabilities (CVE)

Filtered by CWE-20
Total 13237 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17982 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17991 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17970 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-18002 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18009 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-18014 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
CVE-2026-17908 2 Google, Microsoft 2 Chrome, Windows 2026-08-03 N/A 5.8 MEDIUM
Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17766 1 Google 2 Android, Chrome 2026-08-03 N/A 3.3 LOW
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17741 1 Google 2 Android, Chrome 2026-08-03 N/A 7.1 HIGH
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17736 1 Google 2 Android, Chrome 2026-08-03 N/A 5.8 MEDIUM
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17940 1 Google 2 Android, Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17747 1 Google 2 Android, Chrome 2026-08-03 N/A 4.2 MEDIUM
Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17698 1 Google 2 Android, Chrome 2026-08-03 N/A 7.5 HIGH
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17860 1 Google 2 Android, Chrome 2026-08-03 N/A 3.3 LOW
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)
CVE-2026-17901 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Low)
CVE-2026-17794 1 Google 2 Android, Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17679 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17681 1 Google 2 Android, Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17684 2 Apple, Google 2 Iphone Os, Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17690 1 Google 2 Android, Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)