Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Filtered by product Chrome
Total 6526 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17982 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17991 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17966 2 Apple, Google 2 Macos, Chrome 2026-08-03 N/A 6.2 MEDIUM
Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17977 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17970 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-17971 1 Google 1 Chrome 2026-08-03 N/A 8.8 HIGH
Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17981 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18005 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18006 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18008 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-18001 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18002 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18004 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18009 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-18010 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-18014 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
CVE-2026-18019 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17944 2 Apple, Google 2 Iphone Os, Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17960 2 Apple, Google 2 Iphone Os, Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17972 2 Apple, Google 2 Iphone Os, Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)