CVE-2026-17845
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:37
- Zuletzt bearbeitet 03.08.2026 19:41:15
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17846
- EPSS 0.19%
- Veröffentlicht 30.07.2026 00:19:37
- Zuletzt bearbeitet 03.08.2026 19:41:09
Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17847
- EPSS 0.28%
- Veröffentlicht 30.07.2026 00:19:37
- Zuletzt bearbeitet 03.08.2026 19:41:00
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17840
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:36
- Zuletzt bearbeitet 03.08.2026 19:04:34
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17841
- EPSS 0.17%
- Veröffentlicht 30.07.2026 00:19:36
- Zuletzt bearbeitet 03.08.2026 20:17:14
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17842
- EPSS 0.19%
- Veröffentlicht 30.07.2026 00:19:36
- Zuletzt bearbeitet 03.08.2026 19:02:53
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security se...
CVE-2026-17843
- EPSS 0.17%
- Veröffentlicht 30.07.2026 00:19:36
- Zuletzt bearbeitet 03.08.2026 17:39:28
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17836
- EPSS 0.3%
- Veröffentlicht 30.07.2026 00:19:35
- Zuletzt bearbeitet 03.08.2026 17:39:33
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17837
- EPSS 0.25%
- Veröffentlicht 30.07.2026 00:19:35
- Zuletzt bearbeitet 03.08.2026 19:05:41
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security seve...
CVE-2026-17838
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:35
- Zuletzt bearbeitet 03.08.2026 19:05:16
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)