CVE-2026-17925
- EPSS 0.16%
- Veröffentlicht 30.07.2026 00:25:30
- Zuletzt bearbeitet 03.08.2026 13:44:41
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17926
- EPSS 0.23%
- Veröffentlicht 30.07.2026 00:25:30
- Zuletzt bearbeitet 03.08.2026 17:31:27
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium secur...
CVE-2026-17923
- EPSS 0.21%
- Veröffentlicht 30.07.2026 00:25:29
- Zuletzt bearbeitet 03.08.2026 17:31:46
Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted domain name. (Chromium security severity: Low)
CVE-2026-17924
- EPSS 0.25%
- Veröffentlicht 30.07.2026 00:25:29
- Zuletzt bearbeitet 03.08.2026 17:31:35
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17920
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:25:28
- Zuletzt bearbeitet 03.08.2026 17:32:07
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)
CVE-2026-17921
- EPSS 0.23%
- Veröffentlicht 30.07.2026 00:25:28
- Zuletzt bearbeitet 03.08.2026 17:32:02
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity...
CVE-2026-17922
- EPSS 0.4%
- Veröffentlicht 30.07.2026 00:25:28
- Zuletzt bearbeitet 03.08.2026 17:31:55
Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17918
- EPSS 0.3%
- Veröffentlicht 30.07.2026 00:25:27
- Zuletzt bearbeitet 03.08.2026 17:32:23
Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17919
- EPSS 0.12%
- Veröffentlicht 30.07.2026 00:25:27
- Zuletzt bearbeitet 03.08.2026 17:32:13
Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security severity: Low)
CVE-2026-17915
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:25:26
- Zuletzt bearbeitet 03.08.2026 13:47:35
Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)