CVE-2026-17828
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:32
- Zuletzt bearbeitet 03.08.2026 17:40:22
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17822
- EPSS 0.17%
- Veröffentlicht 30.07.2026 00:19:31
- Zuletzt bearbeitet 03.08.2026 17:41:14
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17823
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:31
- Zuletzt bearbeitet 03.08.2026 17:40:52
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17824
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:31
- Zuletzt bearbeitet 03.08.2026 17:40:42
Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17825
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:31
- Zuletzt bearbeitet 03.08.2026 13:44:06
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17818
- EPSS 0.17%
- Veröffentlicht 30.07.2026 00:19:30
- Zuletzt bearbeitet 03.08.2026 17:41:53
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17819
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:30
- Zuletzt bearbeitet 03.08.2026 17:41:45
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17820
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:30
- Zuletzt bearbeitet 03.08.2026 17:41:30
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17821
- EPSS 0.17%
- Veröffentlicht 30.07.2026 00:19:30
- Zuletzt bearbeitet 03.08.2026 17:41:21
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security sever...
CVE-2026-17815
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:29
- Zuletzt bearbeitet 03.08.2026 17:52:02
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)