CVE-2026-17754
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:53
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17755
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:44
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17756
- EPSS 0.27%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:33
Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17749
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 10.08.2026 14:14:34
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromi...
CVE-2026-17750
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 03.08.2026 17:58:25
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17751
- EPSS 0.37%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 03.08.2026 17:58:04
Inappropriate implementation in AdFilter in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17752
- EPSS 0.32%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 03.08.2026 17:57:01
Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17746
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:10
- Zuletzt bearbeitet 03.08.2026 17:58:37
Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17747
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:10
- Zuletzt bearbeitet 03.08.2026 13:46:25
Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...
CVE-2026-17748
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:10
- Zuletzt bearbeitet 10.08.2026 14:14:29
Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)