Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Filtered by product Chrome
Total 5879 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17653 1 Google 1 Chrome 2026-08-06 N/A 8.3 HIGH
Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17654 2 Apple, Google 2 Macos, Chrome 2026-08-06 N/A 7.8 HIGH
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Critical)
CVE-2026-17655 1 Google 1 Chrome 2026-08-06 N/A 9.6 CRITICAL
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17656 1 Google 1 Chrome 2026-08-06 N/A 9.6 CRITICAL
Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17657 1 Google 1 Chrome 2026-08-06 N/A 8.3 HIGH
Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17658 1 Google 1 Chrome 2026-08-06 N/A 8.8 HIGH
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17659 1 Google 1 Chrome 2026-08-06 N/A 4.2 MEDIUM
Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17660 1 Google 1 Chrome 2026-08-06 N/A 8.3 HIGH
Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17789 2 Apple, Google 2 Iphone Os, Chrome 2026-08-04 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17791 1 Google 1 Chrome 2026-08-04 N/A 6.5 MEDIUM
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17795 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17797 1 Google 1 Chrome 2026-08-04 N/A 6.1 MEDIUM
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17798 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17802 1 Google 2 Android, Chrome 2026-08-04 N/A 4.3 MEDIUM
Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17894 2 Google, Linux 2 Chrome, Linux Kernel 2026-08-04 N/A 8.8 HIGH
Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-18015 2 Apple, Google 2 Macos, Chrome 2026-08-04 N/A 9.6 CRITICAL
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18018 2 Google, Microsoft 2 Chrome, Windows 2026-08-04 N/A 4.0 MEDIUM
Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)
CVE-2026-17754 1 Google 1 Chrome 2026-08-04 N/A 6.5 MEDIUM
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17755 1 Google 1 Chrome 2026-08-04 N/A 4.3 MEDIUM
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17756 1 Google 1 Chrome 2026-08-04 N/A 6.5 MEDIUM
Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)