Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 16549 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17999 1 Google 2 Android, Chrome 2026-08-03 N/A 6.5 MEDIUM
Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17994 1 Google 2 Android, Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17984 1 Google 2 Android, Chrome 2026-08-03 N/A 3.3 LOW
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17980 1 Google 2 Android, Chrome 2026-08-03 N/A 3.1 LOW
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17860 1 Google 2 Android, Chrome 2026-08-03 N/A 3.3 LOW
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)
CVE-2026-17901 1 Google 1 Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Low)
CVE-2026-17925 1 Google 2 Android, Chrome 2026-08-03 N/A 4.3 MEDIUM
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17726 1 Google 2 Android, Chrome 2026-08-03 N/A 9.6 CRITICAL
Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17727 1 Google 2 Android, Chrome 2026-08-03 N/A 9.6 CRITICAL
Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17805 1 Google 2 Android, Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17793 1 Google 2 Android, Chrome 2026-08-03 N/A 6.5 MEDIUM
Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17794 1 Google 2 Android, Chrome 2026-08-03 N/A 4.3 MEDIUM
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17825 1 Google 2 Android, Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17673 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17675 1 Google 1 Chrome 2026-08-03 N/A 9.6 CRITICAL
Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17676 1 Google 2 Android, Chrome 2026-08-03 N/A 9.6 CRITICAL
Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17677 1 Google 2 Android, Chrome 2026-08-03 N/A 8.8 HIGH
Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17678 1 Google 1 Chrome 2026-08-03 N/A 8.8 HIGH
Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17679 1 Google 1 Chrome 2026-08-03 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17680 1 Google 2 Chrome, Chrome Os 2026-08-03 N/A 9.6 CRITICAL
Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)