Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 16529 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17780 1 Google 1 Chrome 2026-08-04 N/A 6.3 MEDIUM
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17782 2 Apple, Google 2 Iphone Os, Chrome 2026-08-04 N/A 4.3 MEDIUM
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17783 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17784 2 Apple, Google 2 Macos, Chrome 2026-08-04 N/A 8.8 HIGH
Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17785 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17786 1 Google 1 Chrome 2026-08-04 N/A 8.8 HIGH
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17787 1 Google 1 Chrome 2026-08-04 N/A 6.5 MEDIUM
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17788 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17792 1 Google 1 Chrome 2026-08-04 N/A 6.5 MEDIUM
Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2022-2294 6 Apple, Fedoraproject, Google and 3 more 12 Ipados, Iphone Os, Mac Os X and 9 more 2026-08-04 N/A 8.8 HIGH
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-17841 2 Apple, Google 2 Iphone Os, Chrome 2026-08-03 N/A 6.5 MEDIUM
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17845 1 Google 1 Chrome 2026-08-03 N/A 6.1 MEDIUM
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17846 2 Google, Microsoft 2 Chrome, Windows 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17847 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17848 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-17850 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17852 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17853 1 Google 1 Chrome 2026-08-03 N/A 6.1 MEDIUM
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17854 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17855 2 Apple, Google 2 Macos, Chrome 2026-08-03 N/A 9.6 CRITICAL
Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)