Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-17796

  • EPSS 0.3%
  • Veröffentlicht 30.07.2026 00:19:23
  • Zuletzt bearbeitet 03.08.2026 17:55:56

Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

6.1

CVE-2026-17797

  • EPSS 0.21%
  • Veröffentlicht 30.07.2026 00:19:23
  • Zuletzt bearbeitet 04.08.2026 16:08:47

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17791

  • EPSS 0.26%
  • Veröffentlicht 30.07.2026 00:19:22
  • Zuletzt bearbeitet 04.08.2026 16:09:08

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17792

  • EPSS 0.26%
  • Veröffentlicht 30.07.2026 00:19:22
  • Zuletzt bearbeitet 04.08.2026 14:27:29

Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17793

  • EPSS 0.26%
  • Veröffentlicht 30.07.2026 00:19:22
  • Zuletzt bearbeitet 03.08.2026 13:44:26

Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-17794

  • EPSS 0.23%
  • Veröffentlicht 30.07.2026 00:19:22
  • Zuletzt bearbeitet 03.08.2026 13:44:12

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromi...

6.5

CVE-2026-17787

  • EPSS 0.22%
  • Veröffentlicht 30.07.2026 00:19:21
  • Zuletzt bearbeitet 04.08.2026 14:28:29

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-17788

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:21
  • Zuletzt bearbeitet 04.08.2026 14:28:20

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17789

  • EPSS 0.21%
  • Veröffentlicht 30.07.2026 00:19:21
  • Zuletzt bearbeitet 04.08.2026 16:09:15

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)

4.3

CVE-2026-17790

  • EPSS 0.27%
  • Veröffentlicht 30.07.2026 00:19:21
  • Zuletzt bearbeitet 03.08.2026 15:01:18

Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)