CVE-2026-17934
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:57
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17935
- EPSS 0.34%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:42
Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17936
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:31
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: ...
CVE-2026-17932
- EPSS 0.11%
- Veröffentlicht 30.07.2026 00:25:33
- Zuletzt bearbeitet 03.08.2026 15:00:58
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17933
- EPSS 0.16%
- Veröffentlicht 30.07.2026 00:25:33
- Zuletzt bearbeitet 03.08.2026 17:29:06
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17930
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:25:32
- Zuletzt bearbeitet 03.08.2026 17:29:27
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: ...
CVE-2026-17931
- EPSS 0.23%
- Veröffentlicht 30.07.2026 00:25:32
- Zuletzt bearbeitet 03.08.2026 17:29:19
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17927
- EPSS 0.13%
- Veröffentlicht 30.07.2026 00:25:31
- Zuletzt bearbeitet 03.08.2026 17:29:55
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)
CVE-2026-17928
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:25:31
- Zuletzt bearbeitet 03.08.2026 17:29:44
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17929
- EPSS 0.21%
- Veröffentlicht 30.07.2026 00:25:31
- Zuletzt bearbeitet 03.08.2026 17:29:37
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)